the-web-application-hackers-handbook

86 Chapter 4 n Mapping the Application
Additionally, the site map created during user-directed spidering identified
these resources:
http://eis/pub/media/100
http://eis/pub/media/117
http://eis/pub/user/11
Other numeric values in a similar range are likely to identify further resources
and information.
TIP Burp Intruder is highly customizable and can be used to target any portion
of an HTTP request. Figure 4-7 shows Burp Intruder being used to perform
a brute-force attack on the first half of a filename to make the requests:
http://eis/auth/AddPassword
http://eis/auth/ForgotPassword
http://eis/auth/GetPassword
http://eis/auth/ResetPassword
http://eis/auth/RetrievePassword
http://eis/auth/UpdatePassword
...
Figure 4-7: Burp Intruder being used to perform a customized brute-force attack on
part of a filename