Burp Suite: Burpsuite beginners tutorial - Revision history

Onnowpurbo: /* SSL certificate */

2020-02-10T03:11:02Z

SSL certificate

Onnowpurbo at 02:30, 10 February 2020

2020-02-10T02:30:02Z

Onnowpurbo: /* Burp sebagai HTTP Proxy */

2020-02-10T02:20:36Z

Burp sebagai HTTP Proxy

Onnowpurbo: /* Burp sebagai HTTP Proxy */

2020-02-10T02:17:11Z

Burp sebagai HTTP Proxy

Onnowpurbo: /* Burp as an HTTP Proxy */

2020-02-10T02:16:01Z

Burp as an HTTP Proxy

Onnowpurbo at 02:13, 10 February 2020

2020-02-10T02:13:57Z

Onnowpurbo at 02:11, 10 February 2020

2020-02-10T02:11:45Z

Onnowpurbo at 02:10, 10 February 2020

2020-02-10T02:10:34Z

Onnowpurbo at 02:03, 10 February 2020

2020-02-10T02:03:49Z

Onnowpurbo at 02:03, 10 February 2020

2020-02-10T02:03:17Z

@@ Line 32: / Line 32: @@
 ==SSL certificate==
-If we went now and tried to go to a site configured with SSL (eg google.com) we would get an invalid ssl cert error,
+Jika kita sekarang akses atau mencoba untuk akses situs yang dikonfigurasi dengan SSL (misalnya google.com), kita akan mendapatkan kesalahan ssl cert yang tidak valid,
 [[File:Screenshot 2018-04-07 19-08-05.png|center|400px|thumb]]
-So, following: https://support.portswigger.net/customer/portal/articles/1783075-installing-burp-s-ca-certificate-in-your-browser we will install burp’s CA in our browser.
+Oleh karenanya, mengikuti langkah https://support.portswigger.net/customer/portal/articles/1783075-installing-burp-s-ca-certificate-in-your-browser kita akan install burp CA di browser kita.
-    goto http://burp in firefox
+* akses http://burp di firefox
-    click on ‘CA Certificate’ in the top mennu bar
+* klik ‘CA Certificate’ di top menu bar
-    click ‘save’
+* klik ‘save’
-    goto Firefox > preferences > Advanced > certificates > view certificates > authorities > import
+* klik Firefox > preferences > Advanced > certificates > view certificates > authorities > import
-    browse to where you downloaded the CA bundle.
+* browse ke tempat anda download CA bundle.
-    Tick all the options.
+* Tick all the options.
-    click OK
+* klik OK
-    In the addressbar in firefox, enter “google.com” and switch over to burpsuite.
+* Di firefox addressbar, ketik “google.com” dan switch ke burpsuite.
 [[File:Screenshot 2018-04-07 19-22-03.png|center|400px|thumb]]
@@ Line 53: / Line 53: @@
 In the burpsuite tabs you can see the http headers, http parameters and the hex vaues if you need to (similar to the firefox inspector, but prior to the request being filled by the server)
-    at this point, nothing has been sent to the remote server!
+* at this point, nothing has been sent to the remote server!
-    click ‘forward’
+* click ‘forward’
-    the request is sent to the server
+* the request is sent to the server
-    You now have to switch to the ‘http history tab’
+* You now have to switch to the ‘http history tab’
 [[File:Screenshot 2018-04-07 19-27-25.png|center|400px|thumb}}

@@ Line 30: / Line 30: @@
 * tick checkbox untuk “use for all protocols” (untuk keperluan tutorial ini kita akan mengirimkan semua paket ke burpsuite)
-SSL certificate
+==SSL certificate==
 If we went now and tried to go to a site configured with SSL (eg google.com) we would get an invalid ssl cert error,
@@ Line 62: / Line 62: @@
 You can see the request that was sent, and also a tab with ‘response’ (there is a ‘raw’ output, and also a ‘render’ output – the render is very useful when looking for blindSQL)
-==Performing an attack==
+==Melakukan attack==
 At this point you have the basics of burp. From here you can start on the advanced techniques (tbh upto this point we havent actually done anything yet, we just intercepted a request and forwarded it to the server) so, I’ll quickly show you how to intercept a request and modify it:
@@ Line 74: / Line 74: @@
 Follow my instructions for setting up a local dvwa vagrant installation to safely perform all the following actions (if you set dvwa security to ‘impossible’ mode the attack here will fail, if its set to ‘low’)
-    clear your current session in burp (quit burp and re-open)
+* clear your current session in burp (quit burp and re-open)
-    set your firefox proxy to none, navigate to http://ip.address.of.dvwa.install/dvwa -verify its working
+* set your firefox proxy to none, navigate to http://ip.address.of.dvwa.install/dvwa -verify its working
-    set your firefox to use burp as a proxy again
+* set your firefox to use burp as a proxy again
 ==Scope==
@@ Line 82: / Line 82: @@
 At this stage it is worth setting a ‘scope’ – currently we are logging everything from firefox into burp. This can become overwhelming fast!
-    navigate to http://ip.address.of.dvwa.install/dvwa
+* navigate to http://ip.address.of.dvwa.install/dvwa
-    click ‘forward’ in the proxy tab of burpsuite
+* click ‘forward’ in the proxy tab of burpsuite
-    to set a scope, right click on the line in the history section for the dvwa request and select ‘add to scope’
+* to set a scope, right click on the line in the history section for the dvwa request and select ‘add to scope’
-    click yes when burp asks if you want to ignore requests out-of-scope
+* click yes when burp asks if you want to ignore requests out-of-scope
 [[File:Screenshot 2018-04-07 19-29-18.png|center|400px|thumb]]

@@ Line 24: / Line 24: @@
 Salah satu fitur yang paling banyak digunakan dalam burpsuite adalah http proxy. Ini memungkinkan anda untuk record, modify, playback dan explore permintaan http individual. Sebagai titik awal dalam tutorial ini kita akan menggunakan firefox dan secara manual memasukkan beberapa url untuk dijelajahi.
-Anda harus mengatur firefox untuk menggunakan proxy. Langkah melakukan ini:
+Anda harus mengatur firefox (FF) untuk menggunakan proxy. Langkah melakukan ini:
-* open FF and go to preferences > advanced > networking > connection [settings] > proxy
+* Buka FF klik preferences > advanced > networking > connection [settings] > proxy
-* in the “httpp proxy” input box, enter 127.0.0.1 as the I address and “8080” as the “port”.
+* Di “httpp proxy” input box, masukan 127.0.0.1 sebagai IP address dan “8080” sebagai “port”.
-* tick the checkbox for “use for all protocols” (for the purposes of this tutorial we want to send everything to burpsuite)
+* tick checkbox untuk “use for all protocols” (untuk keperluan tutorial ini kita akan mengirimkan semua paket ke burpsuite)
 SSL certificate

@@ Line 26: / Line 26: @@
 Anda harus mengatur firefox untuk menggunakan proxy. Langkah melakukan ini:
-    open FF and go to preferences > advanced > networking > connection [settings] > proxy
+* open FF and go to preferences > advanced > networking > connection [settings] > proxy
-    in the “httpp proxy” input box, enter 127.0.0.1 as the I address and “8080” as the “port”.
+* in the “httpp proxy” input box, enter 127.0.0.1 as the I address and “8080” as the “port”.
-    tick the checkbox for “use for all protocols” (for the purposes of this tutorial we want to send everything to burpsuite)
+* tick the checkbox for “use for all protocols” (for the purposes of this tutorial we want to send everything to burpsuite)
-SSL certificates
+SSL certificate
 If we went now and tried to go to a site configured with SSL (eg google.com) we would get an invalid ssl cert error,

@@ Line 20: / Line 20: @@
 [[File:Screenshot from 2020-02-10 09-13-00.png|center|400px|thumb]]
-==Burp as an HTTP Proxy==
+==Burp sebagai HTTP Proxy==
-One of the most used features in burpsuite is the http proxy. This allows you to record, modify, playback and explore individual http requests. As a starting point in this tutorial we will be using firefox and manually entering a couple of urls to explore.
+Salah satu fitur yang paling banyak digunakan dalam burpsuite adalah http proxy. Ini memungkinkan anda untuk record, modify, playback dan explore permintaan http individual. Sebagai titik awal dalam tutorial ini kita akan menggunakan firefox dan secara manual memasukkan beberapa url untuk dijelajahi.
-You’ll need to set firefox to use a proxy. To do this:
+Anda harus mengatur firefox untuk menggunakan proxy. Langkah melakukan ini:
      open FF and go to preferences > advanced > networking > connection [settings] > proxy

@@ Line 18: / Line 18: @@
 Anda sekarang disajikan dengan interface utama dari burpsuite.
-[[File:Screenshot 2018-04-07 19-00-48.png|center|400px|thumb]]
+[[File:Screenshot from 2020-02-10 09-13-00.png|center|400px|thumb]]
 ==Burp as an HTTP Proxy==

@@ Line 11: / Line 11: @@
 [[File:Screenshot from 2020-02-10 09-09-44.png|center|300px|thumb]]
-[[File:Screenshot 2018-04-07 18-58-12.png|center|300px|thumb]]
+[[File:Screenshot from 2020-02-10 09-11-05.png|center|300px|thumb]]
 [[File:Screenshot 2018-04-07 18-58-49.png|center|300px|thumb]]

@@ Line 10: / Line 10: @@
 Setelah menjalankan installer, pilih “new temporary project”, di ikuti dengan “use burp defaults”.
-[[File:1-open-burp.png|left|100px|thumb]]
+[[File:1-open-burp.png|center|300px|thumb]]
-[[File:Screenshot 2018-04-07 18-58-12.png|center|100px|thumb]]
+[[File:Screenshot 2018-04-07 18-58-12.png|center|300px|thumb]]
-[[File:Screenshot 2018-04-07 18-58-49.png|right|100px|thumb]]
+[[File:Screenshot 2018-04-07 18-58-49.png|center|300px|thumb]]
   Click “Start Burp”