Welcome, we will see how to how to define in-scope targets using the Burp Suite proxy When performing a
penetration test, it is important to be sure that your attacks
Attacks performed against unintended targets can result in legal liability. To minimize this risk
it is important to define your scope within Burp Suite. In this lecture, we will discuss how to define
web application target with BurpSuite Getting started with Burp Suite to perform web application
analysis against a target, you will need to have a remote system running one or more web applications.
In this example, an instance of Metasploitable2 is used to perform this task. Metasploitable2 has several
preinstalled vulnerable web applications running on the TCP port 80. In the Lab Setup Section
I have explained how to installing metasploitable2 in Virtual Machine your web browser will need to
be configured to pass web traffic through a local instance of Burp Suite. Lets perform web application analysis using
the Burp Suite Openup burpsuite The leftmost tab in the Burp Suite interface is Target.
There are two tabs below this target tab, called Site map and Scope. The Site map tab will be automatically populated
as content is accessed via the proxied web browser. and The Scope tab allows the user to configure
sites and site content to be either included or excluded from the scope. To add a new site to the scope
of the assessment,
Click on the Add button under the Include in scope table Adding in-scope content can be as general as
a range of IP addresses or as specific as an individual file.
The Protocol option has a drop-down menu that includes values of ANY, HTTP, or HTTPS. The Host
or IP range field can include a single hostname, single IP, or range of IP addresses.
so type metasploitable2 IP Address .
Additionally, text fields exist for both Port and File. Fields can be left blank to limit the specificity
of the scope. Fields should be populated using regular expressions. In this lecture, the caret opens
each of the regular expressions, the dollar sign closes them, and the backslashes
are used to escape the special meaning of the periods in the IP address. If you want learn regular expressions,
many resources are openly available on the Internet to explain
their use. you can refer regular-expressions.info website
Conclusion: Regular expressions logically define
the conditions whereby a given host, port, or file may be considered in scope. Defining the scope of an
assessment in Burp Suite affects the way it operates when interacting with web content. The Burp Suite configurations
will define what actions can and cannot be performed on objects that are in or out of the defined scope.
Thats all about defining web application target with BurpSuite,
Thanks for watching and see you in next class.