Burp Suite Cookbook

How to do it...

1. Navigate to OWASP 2013 | A1 – Injection (Other) | HTMLi Via Cookie Injection | Capture Data Page:

2. Note how the page looks before the attack:

3. Switch to the Burp Proxy Intercept tab, and turn Interceptor on with the button Intercept is on.
4. While the request is paused, make note of the last cookie, acgroupswitchpersist=nada:

5. While the request is paused, replace the value of the last cookie, with this HTML injection script: ...