Burp Suite Enterprise Edition is now available in our secure Cloud  –  Learn more
Research Academy
My account Customers About Blog Careers Legal Contact Resellers
Back to all learning paths
PRACTITIONER

Race conditions

This learning path covers race conditions, a common vulnerability in web applications where concurrent processes lead to unintended behavior. You'll learn how to identify, exploit, and prevent race conditions, leveraging tools like Burp Suite's Repeater and the Turbo Intruder extension.

Contents

Get started: Limit overrun race conditions

0 of 29

GET STARTED

Limit overrun race conditions 0 of 3

Limit overrun race conditions Get started

Limit overrun race conditions - Continued

Limit overrun race conditions - Continued

Detecting and exploiting limit overrun race conditions with Burp Repeater 0 of 3

Detecting and exploiting limit overrun race conditions with Burp Repeater

Detecting and exploiting limit overrun race conditions with Burp Repeater - Continued

Lab: Limit overrun race conditions APPRENTICE

Detecting and exploiting limit overrun race conditions with Turbo Intruder 0 of 3

Detecting and exploiting limit overrun race conditions with Turbo Intruder

Detecting and exploiting limit overrun race conditions with Turbo Intruder - Continued

Lab: Bypassing rate limits via race conditions PRACTITIONER

Hidden multi-step sequences 0 of 2

Hidden multi-step sequences

Hidden multi-step sequences - Continued

Methodology for identifying and exploiting race conditions 0 of 4

Methodology

1 - Predict potential collisions

2 - Probe for clues

3 - Prove the concept

Multi-endpoint race conditions 0 of 5

Multi-endpoint race conditions

Aligning multi-endpoint race windows

Connection warming

Lab: Multi-endpoint race conditions PRACTITIONER

Abusing rate or resource limits

Single-endpoint race conditions 0 of 3

Single-endpoint race conditions

Single-endpoint race conditions - Continued

Lab: Single-endpoint race conditions PRACTITIONER

Session-based locking mechanisms 0 of 1

Session-based locking mechanisms

Partial construction race conditions 0 of 2

Partial construction race conditions

Partial construction race conditions - Continued

Time-sensitive attacks 0 of 2

Time-sensitive attacks

Lab: Exploiting time-sensitive vulnerabilities PRACTITIONER

Preventing race condition vulnerabilities 0 of 1

How to prevent race condition vulnerabilities