Attack Tool(s): Burp Suite, Caido, sqlmap, Nuclei
- Burp Suite: https://portswigger.net/burp
- Caido: https://caido.io/
- sqlmap: https://sqlmap.org/
- Nuclei: https://github.com/projectdiscovery/nuclei
Detection Link(s):
- Server Analysis
- Security Information and Event Management (SIEM) Log Analysis
- Firewall Log Analysis
- Endpoint Security Protection Analysis
Helpful Blogs (BHIS):
- “Using Simple Burp Macros to Automate Testing” – https://www.blackhillsinfosec.com/using-simple-burp-macros-to-automate-testing – Burp Suite automation tips.
