Group C is a tool to perform web application testing.
It's available and commercial and free editions.
You can go to ports will get a dot net Web site to check the differences between these versions.
I can tell you from now that it's a must have tool for penetration testers.
It's a very important tool as it does passive scanning active scanning.
Brute force attacks usernames and passwords.
It also does analysis for the session I.D. and the tokens generated to see their level of friendliness.
It also does fuzzing attacks just to insert random and garbage information into your textbooks as just
to check if these text boxes and the input are well sanitized.
Now I have run my methods political logs here with the IP 1.0 1 0 7.
As you know it has lots of vulnerable Web applications and now I'll go to my Kelly machine.
First of all just open up sweet you can press on the icon here.
I have already started that first of all make sure to go to the proxy tab and turn off the interception.
The interception is of all the requests will be queued here and you need to forward them to the destination
server manually.
Now we use this all for the time being.
Now go to the tabs option here and you'll see the point where burp suite is running on.
Now open your web browser here and go to the preferences and make sure to configure the proxy settings
do you use the port 880 on local host.
Now all the traffic that is going out from this browser will pass through our suite proxy before hitting
the server.
Let's close that and let's hit the methods political box here with this IP 1 dot 1 0 7 and let's go
to the damn vulnerable Web application here.
As you can see that it is running.
Now if you go back to your group sweep under the target tab and the site maps uptime you will see that
it has identified the applications under the IP 1 or 2 1 7 we can right click on the main IP and we
can select to Spider the source.
So this is the first action you usually do on brb sweet Spider this horse just press on that.
And would you like to modify the school if you say yes we can like add or remove anything to the scope
here under the scope tab so you can add your l as you want but for the time being I'll just use 1.0
on 0 7.
Now it has detected that there is a form will tell it just to ignore the form for the time being it
is like crawling the web site and checking all the contents.
If you go to the spider tab here you will see that the spider is running and you can see all the status.
Two hundred and that it was successful.
The title of the pages can drill down to see all the content
so let's just stop the spider for now.
If I go to the dumb vulnerable little application I'll use the username admin and password to log in
you'll notice here that verb Street has already identified this log in here under the damn vulnerable
Web application folder.
This is due to the passive scanning verbs we does so if you go and browse the site of the damn vulnerable
Web application just do a normal browsing through the site.
Bourke Street will do like a can of passive scanning the older pages that you visit.
It takes a look at the pages and check the results for the vulnerabilities.
If you go to the scanner tab here you'll be able to see all the results obtained by Bourbon Street and
this is actually available in the professional version.
It will tell you the issue found on the page that you browse and it will color code them based on the
criticality of the issue.
If you go back again to the target now we'll start from scratch here and just open the web browser again
go to the down vulnerable application and try to put trend and username and passwords and you must that
and go to the website suite again you will see that it has identified this attempt.
Now we want to brute force into this application trying to guess the username and password can right
click here and press add or send to ensure you go to the intruder tab go to the position study here
you'll see that Birch Street has identified these parameters that have been sent to the servers.
Now we're only interested in brute forcing the user name and password so you can clear all you select
the username add and the password.
Press on.
And now we will choose the type of attack we have sniper attack battering pitchfork and cluster bomb
sniper attack is used to brute force on one parameter.
Meanwhile cluster bomb is used to brute force more than one parameter.
In our case it's a cluster bomb going to the payload.
You will see that it has identified two parameters the parameter one is used the name in this case and
we will select the payload type which is in our case a simple list as well.
Same goes for the password attack or the password payload now going here for the payload options.
We can add usernames random user names and we can as well load our word list.
If you have a word list with usernames just you can add that admin.
In this case I'll go to the second parameter and I will load a simple word list here and I will add
the password
here.
So as you can see we have two parameters now with different usernames and passwords.
The only thing left to do is to press on the start attack of course and the professional version you'll
have more options to do the attack or start and you would be able to see the different combinations.
Bourbon Street is performing eventually are using the proper word lists.
It will guess the user name and the password scanning through the results here you will see that the
location is log in for these unsuccessful attempts.
Meanwhile the location is index for this attempt which is the correct one.