Last Updated: November 21, 2025
Burp Suite
Web security testing platform
Core Tools
| Item | Description |
|---|---|
Proxy
|
Intercept HTTP/HTTPS |
Scanner
|
Automated vulnerability detection |
Intruder
|
Automated attacks |
Repeater
|
Manual request modification |
Sequencer
|
Analyze session tokens |
Decoder
|
Encode/decode data |
Proxy Setup
| Item | Description |
|---|---|
Configure browser
|
Set proxy to 127.0.0.1:8080 |
Install CA cert
|
For HTTPS interception |
Intercept
|
Capture and modify requests |
Forward
|
Send request to server |
Best Practices
- Start with passive spidering
- Use scope to focus testing
- Save interesting requests to Repeater
- Combine manual and automated testing
💡 Pro Tips
Quick Reference
Burp Suite is essential for web app testing