Results

PROFESSIONAL COMMUNITY

Submitting scripts to our GitHub repository

Sharing your scripts to our Bambdas repository on GitHub contributes to a shared library of tools for the entire community to use. The submission process is ...

PROFESSIONAL

Active scan check worked example

You can extend Burp Scanner by writing your own scan checks. A custom scan check can report new security issues that Burp doesn't detect natively. In this ...

DAST

Adding usernames and passwords for a web app

Cloud Self-hosted If your web app uses a basic username and password-based login system, you can specify login credentials for Burp Scanner to use when ...

PROFESSIONAL

Testing for asynchronous OS command injection vulnerabilities with Burp Suite

Asynchronous OS command injection vulnerabilities occur when an application is vulnerable to command injection, but the command is executed asynchronously. ...

PROFESSIONAL COMMUNITY

Creating Burp extensions

Burp extensions are flexible and powerful plugins that enable you to customize Burp Suite to suit your workflow. You can create your own extensions in Java ...

DAST

Best practices for scanning

Cloud Self-hosted Burp Suite DAST provides preset scan configurations for easy setup. These work for most cases, but some applications may need to use ...

PROFESSIONAL COMMUNITY

Enumerating usernames with Burp Suite

You can use Burp Intruder to insert a list of possible usernames into an authentication mechanism, such as a login form or registration form. This enables ...

PROFESSIONAL COMMUNITY

Testing for stored XSS with Burp Suite

Stored XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. In a ...

PROFESSIONAL COMMUNITY

Testing for DOM XSS with DOM Invader

DOM-based XSS (DOM XSS) arises when an application contains client-side JavaScript that processes data from an untrusted source in an unsafe way, usually by ...

DAST

Custom scan configuration settings

In Burp Suite DAST, custom configurations enable you to configure a number of scan settings, such as request throttling. You can define custom scan ...