From 815f0cdae61707ba0b6267e5d812df70be578132 Mon Sep 17 00:00:00 2001 From: gurkenhabicht Date: Tue, 23 Apr 2024 21:53:01 +0200 Subject: [PATCH] added race condition usage of Burp --- Exploits/Web/Race Conditions.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 Exploits/Web/Race Conditions.md diff --git a/Exploits/Web/Race Conditions.md b/Exploits/Web/Race Conditions.md new file mode 100644 index 0000000..1c8206e --- /dev/null +++ b/Exploits/Web/Race Conditions.md @@ -0,0 +1,15 @@ +# Race Conditions + +Race conditions inside web applications can be tested through flooding a server with HTTP requests. + +You can use Burpsuite for this or create a script. + +## Create a Race Condition through Burpsuite + +Send the intercepted request to the Repeater. Create a tab group an insert said +request. duplicate the request multiple times through right clicking the tab of +the request. Click on the "V" right next to the Send button. Send the request +through "Send group in parallel (last byte-sync)", additionally try "Send group +in sequence (seperate connections)". + +