---
id: 408
title: "Using Burp Suite to audit and exploit an eCommerce application"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/using-burp-suite-to-audit-and-exploit-an-ecommerce-application"
published_at: "2016-03-22T13:46:00Z"
tags: ["burp-suite", "sql-injection", "repeater", "intruder", "magento", "ecommerce", "walkthrough"]
phying_url: "https://phying.com/item/408"
lang: en
---

# Using Burp Suite to audit and exploit an eCommerce application

## Summary

PortSwigger walks through auditing Magento's LUMA sample store with Burp: automated crawl and scan found SQL injection, verified in Repeater, then exploited via Intruder blind injection.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2016-03-22T13:46:00Z
- **Original:** https://portswigger.net/blog/using-burp-suite-to-audit-and-exploit-an-ecommerce-application
- **Phying News:** https://phying.com/item/408