Scan results for SQL Injection Vulnerability with BurpSuite and Using SQLMAP to Exploit the SQL injection.ġ1. Understanding Netcat, Reverse Shells and Bind Shells.ġ0. Installing PHP, MySQL, Apache2, Python and DVWA App in Kali Linux.ĥ. Installing XMAPP and DVWA App in Windows System.Ĥ. The report consists from the following parts:ģ. I tested various types of penetration testing tools in order to exploit different types of vulnerabilities.

Various examples are outlined in this report for different types of vulnerabilities such as: SQL injection, Cross Site Request Forgery (CSRF), Cross-site scripting, File upload, Local and Remote File Inclusion. Scanner sends additional requests and analyzes the application's traffic and behavior to identify issues.

You can also use Burp Scanner to actively audit for vulnerabilities. Burp lists any issues that it identifies under Issue activity on the Dashboard. By default, Burp Scanner scans all requests and responses that pass through the proxy. In this report I am using a combination of Burp tools to detect and exploit vulnerabilities in Damn Vulnerable Web App (DVWA) with low security. You can use Burp's automated and manual tools to obtain detailed information about your target applications.ĭamn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. The suite consists of different tools, like a proxy server, a web spider an intruder and a so-called repeater, with which requests can be automated. Burp suite is a java application that can be used to secure or crack web applications. Burp Suite is an integrated platform/graphical tool for performing security testing of web applications.

Burp suite pro scanner tutorial