cyber document input validation in cyber, Cheat Sheet of Cybercrime, Cybersecurity and Data Privacy

cyber document input validation in cyber

Typology: Cheat Sheet

2025/2026

Uploaded on 11/24/2025

royal-12
royal-12 🇮🇳

1 document

1 / 3

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
LAB FILE
Experiment: Testing Input Validation Using BurpSuite
1. Aim
To analyze and test input validation mechanisms of a web application using
BurpSuite, and observe how the server responds to valid, invalid, and
malicious inputs.
2. Requirements
• Web browser
• BurpSuite Community/Professional
• Local web application with registration form (register.html)
• Server-side script to process input
• Text file for storing validated data
• Browser proxy pointing to BurpSuite
3. Theory
Input validation ensures that user data is correct, safe, and properly
formatted before processing.
BurpSuite helps test input validation by intercepting requests, modifying
inputs, injecting payloads, and analyzing responses.
4. Tools Used
• BurpSuite Proxy
• Intercept
• Repeater
• HTTP History
5. Procedure (Steps)
Step 1: Launch the registration page (register.html).
pf3

Partial preview of the text

Download cyber document input validation in cyber and more Cheat Sheet Cybercrime, Cybersecurity and Data Privacy in PDF only on Docsity!

LAB FILE

Experiment: Testing Input Validation Using BurpSuite

1. Aim

To analyze and test input validation mechanisms of a web application using BurpSuite, and observe how the server responds to valid, invalid, and malicious inputs.

2. Requirements

  • Web browser
  • BurpSuite Community/Professional
  • Local web application with registration form (register.html)
  • Server-side script to process input
  • Text file for storing validated data
  • Browser proxy pointing to BurpSuite

3. Theory

Input validation ensures that user data is correct, safe, and properly formatted before processing. BurpSuite helps test input validation by intercepting requests, modifying inputs, injecting payloads, and analyzing responses.

4. Tools Used

  • BurpSuite Proxy
  • Intercept
  • Repeater
  • HTTP History

5. Procedure (Steps)

Step 1: Launch the registration page (register.html).

Step 2: Open BurpSuite → Proxy → Intercept ON. Set browser proxy to 127.0.0.1:8080. Step 3: Submit valid inputs such as username, email, and password. Burp captures the request. Step 4: Analyze the request parameters inside BurpSuite. Step 5: Perform validation tests:

  • Script Injection: username=
  • Special Character Test: username=dev<>
  • Weak Password Test: password=
  • Invalid Email Test: email=dev
  • Long Input Test Step 6: Observe server responses in the Response tab.

6. Sample Validation Rules Tested

  • Required fields
  • Email format checking
  • Strong password requirements
  • Blocking HTML/script tags
  • Preventing invalid characters
  • Minimum length rules

7. Output

  • Application rejects invalid or harmful inputs
  • Error messages displayed for incorrect inputs
  • Data stored only when validation succeeds