Hello workshop - Hello Burp Extensions!

During the workshop we will solve some of the issues related to the automatic testing of exotic web applications.

Today's web applications  like  to make  testers’ life difficult. They are sending the checksum of the input data or distort data using  some kind  of proprietary encoding. The automated tools are not able  to figure the logic behind the website or will  fail as they are not able  to calculate the checksum

without the required information. Data sent without proper encoding will  be decoded on the server side and will  be invalid because of the decoding process. So, the tools will  fail again.

To solve  these kind  of issues  we will  develop our own Burp  extension to be able to use automated tools. Since version 1.6 it's much  easier  to write extensions even  using  the free edition.


As another possible solution we will  write our „converter web page” which presents data to the automated tool as a classic  form based  page.  Using this page  one can use automated tools as usual.

We recommend attendance to everyone who is interested in testing web applications or develops them.

 


Sponsors:

Gold
Gold
Gold
Silver
Silver
Silver
Silver
Silver
Silver
Bronze
JOB
Technical