1. Create a SSH dynamic port forwarding (SOCKS)
   $ ssh victim@target -D <port>
2. Tell Burp to use the SOCKS proxy in the proxy option configuration
3. Configure FF to use Burp as a proxy

Burp Decoder : Send the token to the Decoder and try to decode the string

Burp Sequencer : Send request to sequencer and "Start Live Capture"
"Burp Sequencer will repeatedly issue the request and extract the relevant token from the application's responses."

Burp Intruder : Send request to Intruder, and select either "Character frobber" or "Bit flipper" payload type and then start attack.
The "Character frobber" payload type operates on a string input and modifies the value of each character position in turn.