Summary

From this chapter, we have a good idea about how the various tools of Burp Suite can be supercharged with effective searching, filtering, and matching of data. Based on simple strings and many times with regular expressions, we can do better analysis of data already generated, or customize our requests and responses to manipulate the applications. We also saw that Match and Replace is an incredibly powerful operation that allows us to add/remove headers and other data and even emulate mobile devices on the fly.

Grep - Match allows us to gain more control over the output of the Intruder tool, which is a blessing because the Intruder tool can generate a lot of data and manually trawling through that would not be too productive. Grep - Extract allows us to not only match the data, but also extract it for further analysis and operations.

Next, we look at the Burp Suite Pro features called engagement tools. We will look at how these tools can be used cohesively to make our security-testing...