The verification code changes when recording, so if you want to use BurpSuite for replay attacks, you need to find a login website that does not need the verification code. 2.2. 2 During the experiment, first of all, according to the above analysis of replay attacks, I chose Touniu Net for the experiment. You can see that its login page does not need to enter a verification code. Then log in, And open BurpSuite to observe the intercepted login information, Forward the unwanted response in the past, Find the important information part, and the intercepted content is shown in the following figure: the circled part is my login name and encrypted password. Record the information to carry out replay attack. When accessing the login page again, only the request needs to be released again to achieve the login effect, without inputting the user name and password. The way to replay the attack is as follows, Choose Block Login Info. Right-click SendtoRepeater for a replay attack, Then enter the Repeater tab to observe, You can see that the content of the attack that you will replay appears in the request interface. Stand-alone go makes replay attacks, The return information of the page appears in the response interface, It represents the success of login authentication, as shown in the following figure: Let's modify the login information just recorded and replay it again to see how the results will be different. Here, I have deleted several digits from the user name, so the login will fail. Through the Compare tab, we can compare the page response after two logins.帐内的其他兵将并不打紧，唯独有一个人不好办。然而。Most cases that may be tried in rural areas may be subject to "summary procedure", that is, what we call "kang trial" at this moment. The "mock trial" project prepared can enable villagers to understand the real trial procedure and the majesty of the law. For this reason, we have prepared two cases, one civil case and one criminal case.BadmintonTools of randomness. Decoder-is a tool for manually executing or intelligently decoding and encoding application data. Comparer-is a practical tool that usually obtains a visual "difference" between two items of data through some related requests and responses. Second, BurpSuite Replay Attack Experiment 2.1, BurpSuite Initial Configuration Downloads BurpSuite First, here I use BurpSuite ev1.7. 11, because other versions cannot be cracked after downloading. After downloading, open the software for configuration, First, the monitoring network selection is carried out, Open the proxy-options tab to select the network segment, You can add the network segment and its port number that you want to listen to the interception, After selecting, check the running option before the selected network segment, As shown in the following figure: Once BurpSuite is configured, You need to configure the browser that accesses the web page, Leaving the browser under BurpSuite's interception, Different browser configurations are different, However, in the configuration of Tools-Internet Options-Connections-LAN, the proxy server is set to be the same as BurpSuite monitoring, as shown in the following figure: At this time, the browser accessing page is under BurpSuite monitoring and interception, and if the browser will appear like a dropped browser waiting for a response continuously when accessing the page, open BurpSui
