In this lab, you will learn how to exploit two vulnerabilities in web applications using BurpSuite. First, you will perform a brute-force password guessing attack against a web application that does not lock users after a certain number of failed login attempts. Next, you will exploit a concurrency vulnerability in an online shopping cart application in order to get more items than you pay for.
Prerequisites
You should have some familiarity with the Unix command line, as well as some basic networking concepts.
Expected Duration
0.5 hours, self-paced. Pause and continue at any time.
0.5 CPEs awarded on successful completion.
Availability
Included if you are a subscriber to any of the following training packages:
- Level 1: CYRIN Enterprise Instructional Labs
- Level 2: Attack/Defense/IR Exercises and Instructional Labs
- Level 3: Attack Scenarios, Attack/Defense/IR Exercises, and Instructional Labs