I'm prepping for the BSCP atm and recently solved the brute-forcing a stay-logged-in cookie lab (again xD). It required some payload processing rules similar to the SQLi tracking cookie on this site (which I was struggling to automate with burp in the vid) - portswigger.net/web-security/authentication/other-mechanisms/lab-brute-forcing-a-stay-logged-in-cookie
I'm assuming it was! I've been meaning to make some videos on the OWASP juice shop, maybe I'll check it out after I get the BSCP. I've already made the next episode of this series but not sure how long it's gonna last because it seems like you can't really do much with most of the vulns. Either that or I'm a n00b, we'll see 😂
Sure! I think the only premium feature I've used so far has been the burp scanner, although the burp intruder (used in this ep) is unthrottled on the pro version.
![Burp Suite Certified Professional (BSCP) Review + Tips/Tricks [Portswigger]](http://i.ytimg.com/vi/L-3jJTGLAhc/mqdefault.jpg)
I'm prepping for the BSCP atm and recently solved the brute-forcing a stay-logged-in cookie lab (again xD). It required some payload processing rules similar to the SQLi tracking cookie on this site (which I was struggling to automate with burp in the vid) - portswigger.net/web-security/authentication/other-mechanisms/lab-brute-forcing-a-stay-logged-in-cookie
Would love to see more of these for sure..!!
Is it deliberate they named it this? Bit weird in my opinion, after the Juice shop from OWASP which is a great project.
I'm assuming it was! I've been meaning to make some videos on the OWASP juice shop, maybe I'll check it out after I get the BSCP. I've already made the next episode of this series but not sure how long it's gonna last because it seems like you can't really do much with most of the vulns. Either that or I'm a n00b, we'll see 😂
when you goes thru some of the burpsuite functionality, could you please let us know if the functionality is on the community or enterprise version.
Sure! I think the only premium feature I've used so far has been the burp scanner, although the burp intruder (used in this ep) is unthrottled on the pro version.
@@_CryptoCat Live audit is also a pro only feature.
@@iSgapetti Yep, the whole burp scanner is part of the pro version 😥
Really good tutorial
Thank you! 💜