Bugcrowd University - Introduction to Burp Suite

Welcome to Bugcrowd University - Introduction to Burp Suite! This burp suite guide will help you get your software setup and teach you a methodology that will lead you to success. Hacking tools are powerful but it's important you know how to properly use them to their full potential. Learn how to setup burp proxies and scanners, fuzzing, how to use Burp Intruder, what to target in a bounty's scope, and more.
Join us for free and begin your journey to become a white hat hacker. Bugcrowd University was created to help you learn the basics of hacking and bug bounty hunting. Learn more: bugcrowd.com/u...

[@TheFern2]

Bookmarks :)
00:00 Introduction
00:16 Browser Setup
04:35 Burp Setup & Proxy
25:37 Spider
33:04 Intruder
45:08 Repeater
55:30 Decoder
1:00:11 Scanner
1:14:40 So what can you do with Burp?
1:17:05 Manually fuzzing a request (Intruder)
1:18:55 When to fuzz?
1:22:46 Pro Function - Content Discovery
1:25:35 Cookie / Header Lab
1:37:06 For next time!

[@soloh4cker]

Thanks buddy

[@ReneManqueros]

@@khanra17 ungrateful bitch, the mic is OK and the tutorial is awesome.

[@MrDaddyv123]

@@ReneManqueros second that. Troll has zero idea he's listening to an OG

[@hunt3rfr3qt3r7]

Thank you so much

[@ruanjiandiguo]

Love you man.

[@tiville421]

In the new version of Burp “send to Spider option” has changed to a “New scan“. Now in Proxy tab intercept right click on the request to bring up the context menu and click “Scan”. Select scan type “crawl” enter the “URLS to scan

[@muhammedyasilkt6423]

thanku

[@dishendra.]

best burp tutorial for beginners I have seen so far!

[@craigaskew9115]

What an eye-opener. It's great to hear plain English (as close as you can get anyway) explanations and instructions. Subscribed!

[@usamach1546]

best video i have seen so far great content and very clear explanation cheers :)

[@KLarsen00]

Great video! Even though I've been using burp for a few months, I still learned some new tricks.

[@StefanRows]

This is so freaking helpful. Thank you Jason.

[@mrwhosmynameagain]

It doesn't even work anymore the umbrellacorpinternal site doesn't even exit anymore :(((((((((((((

[@Death_User666]

This is gold

[@victors202]

As always, great content!! Good job dudes

[@ali-celebi]

Excellent video. Thanks Jason!

[@niteshsurana]

Informative one and worth every minute!

[@0xsunil]

lol. i thought you're saying informative as usually h1 platform marks our bugs as informative. xd

[@paulojr1384]

very rich content
tnx

[@euanfisher6913]

Fantastic video, thank you.

[@niprjct]

I noticed that a lot of projects says that no automated scanning is allowed, does it mean for tools such as Acunetix vulnerability scanner?
But Burp-Suite scanner is fine?
Thank you

[@gprozac]

Awesome tutorial,Thankyou so much.

[@ahmedkasmi7194]

thanks jason😁

[@supersaiyan0x016]

Great initiative.... keep up your good work.....useful for noobs like me 😍

[@shubhamwaghmare6550]

Thank you so much for video waiting for the next lecture

[@MasculintyOp]

Forever grateful..❤️

[@photosynthesis_by_pete4006]

Quality video. Thanks

[@DrKeineL]

Thank you!

[@AnshumanPattnaik]

Thank you so much @jason it's very very helpful...:)

[@CatherineKarena]

There's not much on how to download and install the CA certificate, note the file extension is .CRT not .CERT.

[@soloh4cker]

Instructor: burp
YT captions: *birth*

[@mrwhosmynameagain]

yes

[@RedComet666]

thank you so much

[@franciskp9117]

The new burp suite community edition comes with an embedded browser. Do you recommend the embedded browser or the browser we configure on our own ?

[@thomasseidel5109]

For the Tabs Intruder and then Payloads, I enter values for Payload Options. Nevertheless, I get the error mewling "No Payloads positions defined." What am I doing wrong? Do I have to insert values into Payload Processing?

[@Alexander007A]

hello sir. can update the burp suite tutorial, please coz its been along time

[@Bugcrowd]

We've passed along this feedback to our team - thank you for the suggestion!

[@rakolman]

Is there something detailed in the video that I will not be able to do if I use the community version instead?

[@MrNikhilutube]

amazing ...

[@markanthonyagudo5688]

Thank you

[@omarperez7456]

Awesome 👍

[@SecurityTalent]

Thanks

[@miss-sw3qu]

How do I use Burp with VPN. I have been using Astrill for a long time and I am not sure if Astrill and Burp can work together...
If they cannot work together what other vpn can I use for free with Burp?

[@arjunsharma3248]

I do not that, but I want to know, why would I be using a vpn with burp ?
maybe a dumb ques, but I am just starting out :/

[@vishnuk7612]

Thanks !

[@kishorekrishna6532]

thanks much

[@alexanderreyer2134]

The volume could be slightly higher.

[@marcusv.7565]

Im suffering to "ca cert is not valid" how should i do?

[@chandrakanth4241]

hi i am a web developer, I am totaly new to bug bunty and network security, For me burp suite is very expensive and i don't want to use it. I just want to use kali linux I think it has all the tools that needed to become a bug bounty hunter.
do i really need this tool, or i am fine with linux cli tool?

[@javirebeld]

Burp has a free version that do almost all of what the paid version does, and yes you need to use a proxy like burpsuite to do bug bounties, your other option would be to use ZAP, which is open source so is totally free

[@coffeebreak4888]

I take it as you have to purchase burp?

[@bugsydarko4537]

shout out to bob & alice.

[@hvhbot6605]

33:45 It's not that difficult to mimic what burp suite does with the filtering with python

[@FeederGG]

in the mtach and replace how exactly do i add "bugcrowd" as a user agent cause i dont know why am having issues with that

no entendi mucho pero gracias don

[@panachaiboonyoo1553]

33:04

[@panachaiboonyoo1553]

Thank you so much.

[@tayyabakhtar6157]

why everyones using the pro version !!

[@Siik94Skillz]

umbrellacorp seems to be down, any other page we could safely practice on ? I have another question, when you pentest, should you always do it on a virtual machine, or is it okay with a VPN on a main pc. Because I dual boot Parrot OS. But it says everywhere I shouldnt directly go on vulnerable websites to pentest with a real internet connection hosted by my provider. Any idea if VPN is enough?

[@ingridsophie3738]

yeah VPN should be used and also it is enough.

[@mr_noob5931]

there is no spider option in my burp
*i mean tab

[@ligeskityler]

mr_noob Free version is like that

[@SanjayKumar-dy4nu]

Use version 1.7

[@FearlessSec]

mr_noob portswigger.net/blog/burp-2-0-where-are-the-spider-and-scanner
They just moved it.

[@mrwhosmynameagain]

@@ligeskityler NAH

[@tonyawalker3530]

Retirement

[@atifjafri4351]

In burp 2.0 version there is no spider tab .. can anyone help me what's the alternative?

[@sail3sh703]

download version 1.7 its easy and most tutorials are posted in this version of burpsuite

[@atifjafri4351]

@@sail3sh703 Thankyou bro !!

[@sail3sh703]

I also encounterd same problem few months ago

[@atifjafri4351]

@@sail3sh703 Ahan , I have downgraded to 1.7.30 now and its working fine !! Thankyou for your suggestion.

[@nebdar4340]

Where did you download burp pro 1.7?

[@KingKhan-dc5sv]

50:00

[@mrwhosmynameagain]

?????????????????????

[@abdelrhmanyousri5915]

great , where can i download the slides ?

[@abdelrhmanyousri5915]

OK , I found it in the github
thabks

[@timothydisalvo759]

I gotta get drunk to follow this shit gives me to much of a headache. I set everything up exactly how you have it buts not working. My browser wont let me visit anything now because of BURP fml

[@mrwhosmynameagain]

You SERIOUSLY need to adjust your volume in videos before uploading. One second the video is so quiet I can barely hear it and then the next second it literally almost blows my speakers out. Jeez louise man wtf not cool at all

[@arjunsharma3248]

32:48

[@mrwhosmynameagain]

??????????????????