Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Burp Suite Essentials

You're reading from   Burp Suite Essentials Discover the secrets of web application pentesting using Burp Suite, the best tool for the job

Arrow left icon
Product type Paperback
Published in Nov 2014
Publisher Packt
ISBN-13 9781783550111
Length 144 pages
Edition 1st Edition
Arrow right icon
Author (1):
Arrow left icon
Akash Mahajan Akash Mahajan
Author Profile Icon Akash Mahajan
Akash Mahajan
Arrow right icon
View More author details
Toc

Table of Contents (13) Chapters Close

Preface 1. Getting Started with Burp 2. Configuring Browsers to Proxy through Burp FREE CHAPTER 3. Setting the Scope and Dealing with Upstream Proxies 4. SSL and Other Advanced Settings 5. Using Burp Tools As a Power User – Part 1 6. Using Burp Tools As a Power User – Part 2 7. Searching, Extracting, Pattern Matching, and More 8. Using Engagement Tools and Other Utilities 9. Using Burp Extensions and Writing Your Own 10. Saving Securely, Backing Up, and Other Maintenance Activities 11. Resources, References, and Links Index

Decoder


Decoder tool in Burp Suite does the job of encoding and decoding data. Applications need to encode data while transmitting it or, in many cases, as a security measure. Encoding is not a security measure but a lot of developers mistake it to be.

Note

A simple rule of thumb is that if there is no key present, there is no confidentiality. Since we don't require a key to encode a piece of plain text, we don't require a key to decode.

A web application penetration tester needs to be able to understand the type of encoding that has been applied and then successfully decode the piece of data.

As with all the other tools, we saw that:

  • We can select a piece of text anywhere in Burp Suite and send it to Decoder. Have a look at the following screenshot:

  • We can also do manual transforms (encoding or decoding) using the context menu wherever we are currently working, as shown in the following screenshot:

  • We can do URL-decode and URL encode with different options using the context menu. Have a look at...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at AU $24.99/month. Cancel anytime