I am thinking of taking up ethical hacking as a hobby. So, I installed Burp Suite Community Edition and set it up with Firefox. I opened Instagram and tried to login with these details (just for testing):

Username: admin

Password: 123456

However, when I intercepted the request in Burp, although the username was still admin , the password had been encrypted to something else. This means that somewhere in the code of the website, a formula tells Firefox how to convert 123456 to that string. How can I find this 'formula'?

  • 2
  • @0xec That's helpful. But, it's kinda just the code for me to copy paste. Could you assist in how to locate the said code so I can learn and use the method on other websites too Jun 6 '20 at 1:52
  • You can Google for the string PWD_INSTAGRAM_BROWSER.
    – 0xec
    Jun 6 '20 at 5:30
  • @0xec I meant that if I want to work out the encryption mechanism for some other website, say Microsoft, how do I proceed? Jun 6 '20 at 12:59
  • @FitzWatson most websites don't do anything like this. The answer will also depend on the website, but will generally require you to read through the JavaScript. Jun 6 '20 at 13:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.