Web Attacks: Brute Force with Burp Suite
In this lab, you'll gain hands-on experience using Burp Suite Community Edition to perform brute force attacks against a web application. By the end of this lab, you'll have a solid foundation in setting up and executing a brute force attack with Burp Suite.
Terms and conditions apply.
Lab info
Lab author
Challenge
Getting Started in the Lab Environment
Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!
Challenge
Understanding Brute Force and Setting up Burp Suite
In this challenge, you configure Burp Suite on the Windows-based system that shares a subnet with the server hosting the unwelcome website created by the Dark Kittens.
Challenge
Capturing Traffic and Launching the Brute Force Attack
Use Burp Suite to capture web traffic, execute brute force attacks, intercept POST requests, configure Intruder, and analyze the attack results.
Challenge
The Last Challenge
Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.
Recommended prerequisites
- Foundational computer knowledge.