Sign in to follow this  
m0nk1337

Burp suite Sequencer Tutorial

Recommended Posts

Burp Suite - Sequencer, Uses and Tutorial.

 

- Introduction -

 

Sequencer is a Integrated burpsuites module which is used to predict session ID's.

 

- What is a session ID - 

A unique number assigned to the host by the server in order to differentiate it from other users.

- How to Get Session ID's - 

Intercept the login request with burp suite and after you are logged in you'll see an header called PHPSESSID=96187XXXXXXXX this is your session id.

 

- Uses of Sequencer -

 

> We can capture live headers, it will help us in tracking the difference of session ID's.

> It provides Character level analysis and in-depth information about the entropy of session id, so that we can predict the next token.

 

- Tutorial - 

1. Right click on the request which contains the PHPSESSID and then send it to sequencer.

2. Under sequencer tab you will see a button "Start live capture" click on it.

3. Now the sequencer will try that token again and again to see if next session can be oredicted or not.

4. Now you will get the result and you can copy tokens, save tokens or analyze them at the same time.

 

 

Thankyou for reading guys.

Share this post


Link to post
Share on other sites

thank you 4 eye cancer :kek:

Share this post


Link to post
Share on other sites

thank you 4 eye cancer :kek:

 

Sorry my bad

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this