Burp Suite (Community)

Burp suite is a framework designed to serve as a comprehensive solution for conducting web application penetration testing.

Features of Burp Suite

1. Target

• Site map: provides an overview of the directories

• Scope: allows to define the scope of testing, such as the hosts and URLs

• Issues definitions: details of the common web vulnerabilities and attacks

1. Proxy

• Intercept

• HTTP history

• WebSockets history

• Match and replace

1. Intruder

Attack methods:

a) Sniper

b) Battering ram

c) Pitchfork

d) Cluster bomb

1. Repeater

Allows to modify and resend intercepted requests. Modification of various parameters are allowed, such as: method, path, query and body parameters, cookies and headers.

Discovery hidden content

Discovering hidden content with Burp Suite - PortSwiggerBurp_Suite

Burp Suite tools - PortSwiggerBurp_Suite