Web security testing using Burp and Firebug STC 2012 - QAI

Web security testing using BurpIntruder – Attack typesSniper: This uses a single set of payloads. It targets each position in turn,and inserts each payload into that position in turn. The total number ofrequests generated in the attack is the product of the number of positions andthe number of payloads in the payload set.Battering Ram: This uses a single set of payloads. It iterates through thepayloads, and inserts the same payload into all of the defined positions atonce. The total number of requests generated in the attack is the number ofpayloads in the payload set.7ETT | 12/10/2012 | © Robert Bosch Engineering and Business Solutions Limited 2012. All rights reserved, also regarding any disposal,exploitation, reproduction, editing, distribution, as well as in the event of applications for industrial property rights.