GET & POST Capture Lab - savannahc502/SavC-TechJournal-SEC260 GitHub Wiki

Lab Setup with new HTML/PHP Pages:

image

  • Create this page in the indicated directory

image

  • The result of that page in a web browser is above
  • Make sure the form1action,php is edited to form1action.php

image

  • Create this file in the same directory

Burpsuite in Kali GET

image

  • Once it loads: Temporary project -> next, Start burp (basically the defaults)
  • Go to Proxy tab and click on "Open browser" (You might have to enter the default password of the VM)

image

  • Fill and submit the form

image

  • This should be the submit result
  • Go back to burp application and find the packet that have your name and last name submitted as GET request.

image

  • Screenshot of browser's GET request with the parameters shown in burp application

image

  • Screenshot of server's response

Burpsuite in Kali POST

image

image

  • Now alter your code and change the delivery method to POST in your form. Also receive the data with POST in form1action.php
  • Utilize burp application and browser to repeat the GET steps for POST method.

image

  • Screenshot of browser's POST request with the parameters shown in burp application