tag:blogger.com,1999:blog-8503755746105415394.post8200585723031918197..comments2010-03-01T12:36:19.390ZComments on PortSwigger.net - web application security: [V13P] Content discoveryPortSwiggerhttp://www.blogger.com/profile/04744809054520271899noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-8503755746105415394.post-88492051377959187932010-03-01T12:36:19.390Z2010-03-01T12:36:19.390ZIn the Web Application Hacker's Handbook Chapter 4...In the Web Application Hacker's Handbook Chapter 4, they describe how you can use the Intruder from burpsuite to achieve "almost" the same results as you would with DirBuster. You basically create a GET message and capture it with your proxy, send it to the intruder, mark the position or file paths in the HTTP GET request and indicate the payload list you want to use to replace thatc-q-rhttp://www.blogger.com/profile/02028124011819469581noreply@blogger.comtag:blogger.com,1999:blog-8503755746105415394.post-90688375148407668942009-11-24T10:14:43.290Z2009-11-24T10:14:43.290ZLooking around for some time to replace Dirbuster ...Looking around for some time to replace Dirbuster with a better tool, since Dirbuster is missing some needed features. It looks like this new addition to Burp will fill those gaps. Can't wait to test it! Hope the custom word lists can be added soon, because unless you come up with some really good word lists I prefer to use my own ;)Erwinhttp://www.blogger.com/profile/06812522015913267608noreply@blogger.comtag:blogger.com,1999:blog-8503755746105415394.post-48341505288174241542009-11-24T09:35:49.584Z2009-11-24T09:35:49.584ZHey, did anything new get added related to burp pl...Hey, did anything new get added related to burp plugins? :-)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8503755746105415394.post-4559284436776281202009-11-23T16:18:22.095Z2009-11-23T16:18:22.095Z@Anonymous
Custom wordlists were on the wish-list...@Anonymous<br /><br />Custom wordlists were on the wish-list, but didn't quite make the initial cut. Hopefully they'll get added pretty soon.PortSwiggerhttp://www.blogger.com/profile/04744809054520271899noreply@blogger.comtag:blogger.com,1999:blog-8503755746105415394.post-57942351612852912009-11-23T16:13:45.106Z2009-11-23T16:13:45.106ZAny chance of being able to use third-party test c...Any chance of being able to use third-party test case files, kind of like DirBuster letting you define your own files to search forAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-8503755746105415394.post-23757176634326962342009-11-23T15:49:04.509Z2009-11-23T15:49:04.509ZShouldn't that read dirbuster?Shouldn't that read dirbuster?Anonymousnoreply@blogger.com