Using the infamous Burp

Burp has been around for years now; it is a collection of multiple tools built in Java by PortSwigger web security. It has various products, such as Decoder, Proxy, Scanner, Intruder, Repeater, and so on. Burp features an Extender, which allows a user to load different extensions that can be used to make pentesting even more efficient! You will learn about some of them in the upcoming recipes.

How to do it...

Let's take a look at how we can use Burp effectively:

1. Kali already has a free version of Burp, but we will need a full version to fully use its features. So, we open up Burp:

2. Click on Start Burp and we will see the Burp load up:

3. Before we start hunting for bugs, we first install some extensions that may come in handy. Select BApp Store from the Extender menu:

4. We will see a list of extensions. Some of the extensions we will have to install are as follows:
   • J2EEScan
   • Wsdler
   • Java Deserialization Scanner
   • HeartBleed
5. Click on Install after selecting each of these extensions.

6. Once...