Setting the Target Site Map

Now that we have traffic flowing between your browser, Burp, and the OWASP Broken Web Applications (BWA) virtual machine (VM), we can begin setting the scope of our test. For this recipe, we will use the OWASP Mutillidae II link (http://<Your_VM_Assigned_IP_Address>/mutillidae/) available in the OWASP BWA VM as our target application.

Looking more closely at the Target tab, you will notice there are two subtabs available: Site map and Scope. From the initial proxy setup between your browser, Burp, and the web server, you should now have some URLs, folders, and files shown in the Target | Site map tabs. You may find the amount of information overwhelming, but setting the scope for our project will help to focus our attention better.

Getting ready

Using the Target | Site map and Target | Scope tabs, we will assign the URL for Mutillidae (http://<Your_VM_Assigned_IP_Address>/mutillidae/) as the scope.

How to do it...

Execute the following...