m0nk1337 2 Burp Suite - Sequencer, Uses and Tutorial. - Introduction - Sequencer is a Integrated burpsuites module which is used to predict session ID's. - What is a session ID - A unique number assigned to the host by the server in order to differentiate it from other users. - How to Get Session ID's - Intercept the login request with burp suite and after you are logged in you'll see an header called PHPSESSID=96187XXXXXXXX this is your session id. - Uses of Sequencer - > We can capture live headers, it will help us in tracking the difference of session ID's. > It provides Character level analysis and in-depth information about the entropy of session id, so that we can predict the next token. - Tutorial - 1. Right click on the request which contains the PHPSESSID and then send it to sequencer. 2. Under sequencer tab you will see a button "Start live capture" click on it. 3. Now the sequencer will try that token again and again to see if next session can be oredicted or not. 4. Now you will get the result and you can copy tokens, save tokens or analyze them at the same time. Thankyou for reading guys. Quote Share this post Link to post Share on other sites
m0nk1337 2 thank you 4 eye cancer :kek: Sorry my bad Quote Share this post Link to post Share on other sites