{"id":786,"date":"2023-10-06T18:57:58","date_gmt":"2023-10-06T18:57:58","guid":{"rendered":"https:\/\/hacking.cool\/?p=786"},"modified":"2023-10-06T19:15:11","modified_gmt":"2023-10-06T19:15:11","slug":"burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results","status":"publish","type":"post","link":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/","title":{"rendered":"Burp Intruder and Cluster bomb attack – how to set up and filter the results."},"content":{"rendered":"\n

The Cluster bomb attack can be very useful when you need to use more than one payload. For instance, we are going to retrieve the administrator password via triggering conditional responses through SQL statement. We already know that the length of the password is 20 characters. Our statement is:<\/p>\n\n\n\n

‘ AND (SELECT SUBSTRING(password,1,1) FROM users WHERE username=’administrator’)=’a<\/strong><\/p>\n\n\n\n

Lets send our request to Intruder and chose the Cluster bomb attack:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Add the payload points:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Now time to set the payload. Go to “Payloads” – “Payload sets” – “Payload set” and chose “1”. In our case we need to use only numbers from 1 to 20.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

For the second set we will use simple list a-z and numbers 0-9:<\/p>\n\n\n\n

\"\"<\/p>\n\n\n\n

Lets start our attack \ud83d\ude42 When attack will be finished we can see the result:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

But how we can filter it to see which letter is correct? If you have difference in status codes of responses you can filter it by status code:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

But in this case we’ve got the difference by the Length of responses (5383 for incorrect and 5444 for correct letter), that’s why we need only sort it by number of “Payload 1” and the “Length”:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

More interesting case is when we handle the injection which triggered time delays. How we can filter the result now?<\/p>\n\n\n\n

Before starting attack, go to “Resource pool” and Create a new resource pool with Maximum concurrent request set to 1:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

When attack will be finished go to “Columns” and add “Response received” one. Then sort the results by “Response received” decreasing. Voila, we retrieve a password and just need it to rewrite from 1 to 20: <\/p>\n\n\n\n

\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

The Cluster bomb attack can be very useful when you need to use more than one payload. For instance, we are going to retrieve the administrator password via triggering conditional responses through SQL statement. We already know that the length of the password is 20 characters. Our statement is: ‘ AND (SELECT SUBSTRING(password,1,1) FROM users…<\/span><\/p>\n

Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":841,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-786","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"yoast_head":"\nBurp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Burp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool\" \/>\n<meta property=\"og:description\" content=\"The Cluster bomb attack can be very useful when you need to use more than one payload. For instance, we are going to retrieve the administrator password via triggering conditional responses through SQL statement. We already know that the length of the password is 20 characters. Our statement is: ‘ AND (SELECT SUBSTRING(password,1,1) FROM users…Read More\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/\" \/>\n<meta property=\"og:site_name\" content=\"hacking.cool\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-06T18:57:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-06T19:15:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"1200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anya\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anya\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/#website\",\"url\":\"https:\/\/hacking.cool\/atomanya\/\",\"name\":\"hacking.cool\",\"description\":\"is the hacking school \ud83d\udc69\ud83c\udffb\u200d\ud83d\udcbb\ud83e\uddd1\ud83c\udffb\u200d\ud83d\udcbb\ud83d\uddfa\ud83d\udcda\ud83d\udcd6\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hacking.cool\/atomanya\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#primaryimage\",\"url\":\"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg\",\"contentUrl\":\"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg\",\"width\":1200,\"height\":1200},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/\",\"url\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/\",\"name\":\"Burp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool\",\"isPartOf\":{\"@id\":\"https:\/\/hacking.cool\/atomanya\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#primaryimage\"},\"datePublished\":\"2023-10-06T18:57:58+00:00\",\"dateModified\":\"2023-10-06T19:15:11+00:00\",\"author\":{\"@id\":\"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/1c3060c2c9f3493114afde50f9b22bc6\"},\"breadcrumb\":{\"@id\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hacking.cool\/atomanya\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Burp Intruder and Cluster bomb attack – how to set up and filter the results.\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/1c3060c2c9f3493114afde50f9b22bc6\",\"name\":\"Anya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e2e99aa0c5e7264f948b910a22231aa9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e2e99aa0c5e7264f948b910a22231aa9?s=96&d=mm&r=g\",\"caption\":\"Anya\"},\"url\":\"https:\/\/hacking.cool\/atomanya\/author\/anya\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Burp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/","og_locale":"en_US","og_type":"article","og_title":"Burp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool","og_description":"The Cluster bomb attack can be very useful when you need to use more than one payload. For instance, we are going to retrieve the administrator password via triggering conditional responses through SQL statement. We already know that the length of the password is 20 characters. Our statement is: ‘ AND (SELECT SUBSTRING(password,1,1) FROM users…Read More","og_url":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/","og_site_name":"hacking.cool","article_published_time":"2023-10-06T18:57:58+00:00","article_modified_time":"2023-10-06T19:15:11+00:00","og_image":[{"width":1200,"height":1200,"url":"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg","type":"image\/jpeg"}],"author":"Anya","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anya","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/hacking.cool\/atomanya\/#website","url":"https:\/\/hacking.cool\/atomanya\/","name":"hacking.cool","description":"is the hacking school \ud83d\udc69\ud83c\udffb\u200d\ud83d\udcbb\ud83e\uddd1\ud83c\udffb\u200d\ud83d\udcbb\ud83d\uddfa\ud83d\udcda\ud83d\udcd6","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hacking.cool\/atomanya\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#primaryimage","url":"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg","contentUrl":"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg","width":1200,"height":1200},{"@type":"WebPage","@id":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/","url":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/","name":"Burp Intruder and Cluster bomb attack - how to set up and filter the results. - hacking.cool","isPartOf":{"@id":"https:\/\/hacking.cool\/atomanya\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#primaryimage"},"datePublished":"2023-10-06T18:57:58+00:00","dateModified":"2023-10-06T19:15:11+00:00","author":{"@id":"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/1c3060c2c9f3493114afde50f9b22bc6"},"breadcrumb":{"@id":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/hacking.cool\/atomanya\/burp-intruder-and-cluster-bomb-attack-how-to-set-up-and-filter-the-results\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hacking.cool\/atomanya\/"},{"@type":"ListItem","position":2,"name":"Burp Intruder and Cluster bomb attack – how to set up and filter the results."}]},{"@type":"Person","@id":"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/1c3060c2c9f3493114afde50f9b22bc6","name":"Anya","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/hacking.cool\/atomanya\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e2e99aa0c5e7264f948b910a22231aa9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e2e99aa0c5e7264f948b910a22231aa9?s=96&d=mm&r=g","caption":"Anya"},"url":"https:\/\/hacking.cool\/atomanya\/author\/anya\/"}]}},"jetpack_featured_media_url":"https:\/\/hacking.cool\/atomanya\/wp-content\/uploads\/2023\/10\/1200x1200bf-60.jpg","_links":{"self":[{"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/posts\/786","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/comments?post=786"}],"version-history":[{"count":13,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/posts\/786\/revisions"}],"predecessor-version":[{"id":838,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/posts\/786\/revisions\/838"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/media\/841"}],"wp:attachment":[{"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/media?parent=786"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/categories?post=786"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hacking.cool\/atomanya\/wp-json\/wp\/v2\/tags?post=786"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}