Date: 21 Feb 2025

  1. open oswap bricks
    attachments/Pasted image 20250309122245.png

  2. Bricks -> Content pages
    attachments/Pasted image 20250309122257.png

  3. select content #1
    attachments/Pasted image 20250309122323.png

  4. go to intercept off->then send to render
    attachments/Pasted image 20250309122339.png

  5. go to repeater -> send -> then you can see in the response side the response.
    attachments/Pasted image 20250309122352.png

  6. tamper set the id =1 then click SEND
    attachments/Pasted image 20250309122403.png

  7. go to render -> you can see the user id : 1 now
    attachments/Pasted image 20250309122416.png

  8. you can then try in id = 4-2 , you get user id : 2 then click SEND
    attachments/Pasted image 20250309122430.png

  9. you can then try in id = 2+2 , you get user id : error as ‘+' dont work here
    attachments/Pasted image 20250309122443.png

  10. after intercept on, then go to the login page of 192.168.31.128 then --> help me
    attachments/Pasted image 20250309122454.png

  11. then capture the intercept page and forward to repeater then click SEND and make the INTERCEPT OFF
    attachments/Pasted image 20250309122506.png

  12. then we will tamper it by modifying the pagename=user%2info.php then click SEND
    attachments/Pasted image 20250309122517.png

  13. again modify this
    attachments/Pasted image 20250309122532.png

  14. edit in your url instead of login ,write user-info.php
    attachments/Pasted image 20250309122542.png

  15. hit the help button
    attachments/Pasted image 20250309122554.png

  16. you again get this page. hence even after tampering the data , you can view the same page.
    attachments/Pasted image 20250309122221.png

Note

Need of repeater in burp suite :

  • Burp Repeater is a tool in Burp Suite that allows you to manually modify and send HTTP or WebSocket messages to the server repeatedly.
  • Repeater supports working with multiple messages simultaneously, each in its own tab.
  • Used to replay the request again and again rather than capturing the request everytime.