Burp Suite

Start to Finish : Examining router security with BurpSuite

To keep this scenario as realistic as possible I start with Netdiscover and confirm the IP address of the homelab's router.

Typing in the router's IP address leads me to it's login page. I use BurpSuite's proxy to examine it further and type admin as the username and password.

Now on the request panel, notice how the authorization field is encoded in Base64.

I assume that my input is encoded and then sent to the router, which is confirmed by the inspector panel that features a built in encoder and decoder.

Now I start the second phase of this demo and use another computer to log into the router.

Because the router uses HTTP I can use Wireshark to expose the encoded username and password.

I copy it's authorization field.

And log in.

Page updated

Google Sites

Report abuse