Burp Suite
Burp Suite by PortSwigger is the industry-standard platform for web application security testing. It acts as an intercepting proxy between your browser and the target, allowing you to inspect, modify, and replay HTTP/HTTPS traffic to discover vulnerabilities like SQL injection, XSS, SSRF, and more.
Burp Suite combines a powerful proxy, an automated scanner, a manual testing workbench (Repeater), a brute-forcing engine (Intruder), and hundreds of extensions into a unified platform used by penetration testers, bug bounty hunters, and security researchers worldwide.
Module Sections
Installation & Setup
Download, install, configure proxy, and install CA certificate for HTTPS interception.
Proxy
Intercept, view, and modify HTTP/HTTPS traffic between browser and target. The core of Burp Suite.
Repeater
Manually edit and resend individual requests. Essential for testing parameters, headers, and payloads.
Intruder
Automated fuzzing and brute forcing with four attack modes: Sniper, Battering Ram, Pitchfork, Cluster Bomb.
Scanner
Automated vulnerability detection for OWASP Top 10 issues. Active and passive scanning modes (Pro feature).
Decoder
Encode and decode data: URL, Base64, HTML, Hex, Gzip. Chain operations for complex obfuscation.
Comparer
Visually compare two responses to spot differences. Useful for blind injection detection.
Extensions
Must-have BApps: Turbo Intruder, Logger++, Autorize, JWT Editor, Active Scan++, Param Miner, and more.
Testing Workflow
Systematic approach: proxy → reconnaissance → manual testing (Repeater) → automated attacks (Intruder) → scan.
Configuration Builder
Interactive tool to configure proxy settings, scope, and generate ready-to-use setup commands.
Examples
Real-world testing scenarios: SQL injection, XSS, authentication bypass, SSRF with step-by-step commands.
Pro Tips
Expert advice on scope management, Collaborator, session handling, bypassing WAFs, and efficient testing strategies.
Burp Suite Quiz
Test your knowledge with 20 multiple-choice questions covering all Burp Suite tools and workflows.
Burp Suite Lab
Hands-on exercises where you configure Burp, intercept requests, fuzz parameters, and identify vulnerabilities.
Quick Start
New to Burp Suite? Start with these three sections in order:
Warning