Results

PROFESSIONAL COMMUNITY

Becoming a Burp Suite early adopter

There are two release channels for Burp Suite: Early Adopter and Stable. New features are initially released exclusively on the early adopter channel, but ...

PROFESSIONAL

Testing for blind XXE injection vulnerabilities with Burp Suite

Blind XXE injection vulnerabilities occur when an application is vulnerable to XXE injection but doesn't return the values of any defined external entities ...

PROFESSIONAL COMMUNITY

Spoofing your IP address using Burp Proxy match and replace

Learn how to spoof your IP address using match and replace rules when performing manual testing in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL

Adding custom columns in the HTTP history

You can use Java-based scripts to add powerful custom columns to the HTTP history table. Custom columns enable you to see more detail about the items in ...

PROFESSIONAL COMMUNITY

Identifying supported HTTP methods with Burp Suite

Due to misconfiguration, some websites support additional HTTP methods that may be useful to an attacker in a number of ways. These include: Enabling you to ...

PROFESSIONAL DAST

Best practice for recording login sequences

Burp Suite's recorded login sequence feature enables you to specify login details that Burp Scanner can use when performing authenticated scanning on ...

PROFESSIONAL COMMUNITY

Identifying reflected input with Burp Suite

Reflected input is when data is copied from a request and echoed into the application's immediate response. This is a prerequisite for a range of ...

PROFESSIONAL COMMUNITY

Decoding opaque data with Burp Suite

Burp Suite includes multiple tools for working with opaque data that isn't human-readable. You can use these while you analyze the attack surface, in order ...

PROFESSIONAL COMMUNITY

Checking your browser proxy configuration

Follow the steps below to check your browser proxy configuration. Note These steps are only necessary if you want to use an external browser for manual ...

PROFESSIONAL

Testing for blind XSS

Blind cross-site scripting (XSS) is a type of stored XSS in which the data exit point is not accessible to the attacker, for example due to a lack of ...