title: Burp Suite: how to hack this URL?
body: <p>I am attempting a hacking exercise in a network security course.  However, I am stuck with understanding how to use Burp Suite.</p>
  
  <p>This is the RAW data:</p>
  
  <pre><code>GET /ekohshahrabohpha/cgi-bin/users.php HTTP/1.1
  Host: 134.219.148.11:61166
  Connection: close
  Accept: */*
  User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/601.4.4 (KHTML, like Gecko) Version/9.0.3 Safari/601.4.4
  Accept-Language: en-us
  Referer: http://134.219.148.11:61166/ekohshahrabohpha/
  Accept-Encoding: gzip, deflate
  </code></pre>
  
  <p>This is the Header - how do you edit the header to include some bash command injection to gain access to the following URL?</p>
  
  <pre><code>GET /ekohshahrabohpha/ HTTP/1.1
  Host 134.219.148.11:61166
  Accept-Encoding gzip, deflate
  User-Agent Mozilla/5.0(Macintosh; Intel Mac OS X ... )
  Accept-Language en-us
  Cache-Control max-age=0
  Connection close
  </code></pre>
  
  <p>The IP address I am attempting to break is: 134.219.148.11.61166</p>
  
  <p>When I break it, I get a new ip address.</p>
  
  <p>Below is the source code for the page.</p>
  
  <pre><code>&lt;!DOCTYPE html&gt;
  &lt;html lang="en"&gt;
    &lt;head&gt;
      &lt;meta charset="utf-8"&gt;
      &lt;meta name="viewport" content="width=device-width, initial-scale=1.0"&gt;
      &lt;title&gt;Level 2&lt;/title&gt;
      &lt;link href="http://netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap.min.css" rel="stylesheet"&gt;
      &lt;link href="http://netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap-theme.min.css" rel="stylesheet"&gt;
      &lt;link href="site.css" rel="stylesheet"&gt;
    &lt;/head&gt;
  
  &lt;body&gt;
    &lt;div class="container"&gt;
      &lt;div class="page-header"&gt;
        &lt;h1&gt;Level 2&lt;/h1&gt;
        &lt;p class="lead"&gt;
          &lt;h2&gt;Active Users&lt;/h2&gt;
        &lt;/p&gt;
      &lt;/div&gt;
  
  
      &lt;div id="userlist"&gt;
        &lt;pre&gt;Checking for users...&lt;/pre&gt;
      &lt;/div&gt;
    &lt;/div&gt;
  &lt;script language="JavaScript"&gt;
  var http_request = false;
  
    function getusers() {
      if (window.XMLHttpRequest) { // non IE
        http_request = new XMLHttpRequest();
      }
      else if (window.ActiveXObject) { //
        try {
          http_request = new ActiveXObject("Microsoft.XMLHTTP");
        }
        catch (error) {}
      }
      if (!http_request) {
        alert('Cannot create XML HTTP instance');
        return false;
      }
  
      http_request.onreadystatechange = stateManager;
      var myurl = "cgi-bin/users.php";
      var f = document.getElementById("filter");
      if (f != null) {
        if (f.value != '') {
          myurl = myurl + "?filter=" +  f.value;
        }
      }
      http_request.open("GET", myurl, true);
      http_request.send(null);
    }
  
    function stateManager() {
      if (http_request.readyState == 4) {
        if (http_request.status == 200) {
          updatepage(http_request.responseText);
        } else {
          alert('There was a problem with the request.');
        }
      }
    }
  
    function updatepage(str) {
      document.getElementById("userlist").innerHTML = str;
    }
  
    setTimeout("getusers()", 5000);
  &lt;/script&gt;
  &lt;/body&gt;
  &lt;/html&gt;
  </code></pre>