Burp Suite - Web Testing

Burp Suite is the leading toolkit for web application security testing, letting testers intercept, inspect, and manipulate traffic between browser and server.

The Intercepting Proxy

Burp's core proxy sits between the browser and the target application, capturing every request and response so testers can view and modify traffic before it's forwarded.

Repeater and Intruder

Repeater lets testers resend and tweak individual requests to observe how the application responds, while Intruder automates sending many request variations to test for issues like injection or brute-forceable inputs.

The Web Vulnerability Scanner

Burp's scanner automatically crawls an application and tests for common vulnerabilities, flagging potential issues such as SQL injection and cross-site scripting for manual verification.

Fitting Into a Web Pentest

Burp Suite is typically used throughout a web application assessment, from initial mapping of the app's functionality to detailed manual testing of specific parameters and workflows.