Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Using Burp Suite to audit and exploit an eCommerce application

portswigger.net | blog | #burp-suite | #sql-injection | #repeater | #intruder | #magento | #ecommerce | #walkthrough

Summary

PortSwigger walks through auditing Magento's LUMA sample store with Burp: automated crawl and scan found SQL injection, verified in Repeater, then exploited via Intruder blind injection.
Published
Collected

original ↗

Related coverage

  1. [MoBP] Flexible redirection (portswigger.net)
  2. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  3. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  4. From capable AI models to trusted security testing (portswigger.net)
  5. Introducing Burp AT: agentic AI, built on two decades of Burp Suite (portswigger.net)
  6. How I sped up exploit validation in Repeater using Burp AI (portswigger.net)

back