Runs with every possible permutation for query-based payloads. For instance "https://www.example.com/api/v1/users" with payload "..;" will result in testing the ...

This release adds some powerful new Scanner checks based on James Kettle 's talk at Black Hat today. For full details of this awesome new research, see our blog post on practical web cache poisoning.

Burp's support for invisible proxying allows non-proxy-aware clients to connect directly to a Proxy listener. This is useful if the target application uses a thick client component that runs outside ...

All automated scanners can generate false positives, which are issues flagged as vulnerabilities that don't pose actual risks. Managing false positives enables you to reduce noise, avoid wasting ...

BChecks are custom scan checks that you can create and import. Burp Scanner runs these checks in addition to its built-in scanning routine, helping you to target your scans and make your testing ...

This documentation describes the functionality of all editions of Burp Suite and related components. Use the links below to get started: ...

You need to configure Firefox so that you can use it for testing with Burp Suite.

Professional By default, attacks are saved in-memory, so they are lost if you close Burp Suite. However, you can save them to your project file. Select Save attack to project file. We recommend that ...

When you launch a Burp Intruder attack, the attack runs in a new results window. This contains the attack results, and a clone of the configuration side panel from which the current attack is based.

When launching Burp Suite Professional for the first time, you will be prompted to provide your Burp license key. Your license key is available to download from your ...

If you need to use an external browser with Burp instead of Burp's preconfigured Chromium browser, perform the following configuration steps. For the vast majority of users, this process is not ...

Burp Suite is a comprehensive suite of tools for web application security testing. This interactive tutorial is designed to get you started with the core features of Burp Suite as quickly as possible.