Burp Suite (Community)

Burp suite is a framework designed to serve as a comprehensive solution for conducting web application penetration testing.

Features of Burp Suite

  1. Target

  • Site map: provides an overview of the directories

  • Scope: allows to define the scope of testing, such as the hosts and URLs

  • Issues definitions: details of the common web vulnerabilities and attacks

  1. Proxy

  • Intercept

  • HTTP history

  • WebSockets history

  • Match and replace

  1. Intruder

Attack methods:

a) Sniper

b) Battering ram

c) Pitchfork

d) Cluster bomb

  1. Repeater

Allows to modify and resend intercepted requests. Modification of various parameters are allowed, such as: method, path, query and body parameters, cookies and headers.

PreviousWeb fuzzingNextInformation gathering/reconnaissance

Last updated