↓Skip to main content
  1. Tools/

Burp Suite

·109 words·1 min· 0
Table of Contents
Tool's Home Page

Overview #

Burp Suite is a toolkit for testing web applications. It sits between your browser and the target, so you can see and change every request and response.

The main parts are:

  • Proxy: intercept and edit traffic as it passes through.
  • Repeater: resend a single request with changes, to test how the server reacts.
  • Intruder: automate many variations of a request, such as trying payloads in a field.

Burp Suite Community is free. The Professional edition adds the automated scanner and more.

PortSwigger also runs the free Web Security Academy, which teaches web vulnerabilities with hands-on labs. Only test applications you are authorised to test.