Results

PROFESSIONAL COMMUNITY

Working with JWTs in Burp Suite

JSON web tokens (JWTs) are a standard format for sending cryptographically signed JSON data between systems. They're commonly used in authentication, ...

DAST

Creating a configuration file for a CI-driven scan with no dashboard

We provide a template configuration file. The file includes comments to help you to understand and edit each of the parameters. After you edit the ...

DAST

Performing bulk actions with scans

Cloud Self-hosted The bulk actions menu enables you to cancel or delete multiple scans at the same time. You can also use the Scan again option to scan the ...

PROFESSIONAL COMMUNITY

Submitting scripts to our GitHub repository

Sharing your scripts to our Bambdas repository on GitHub contributes to a shared library of tools for the entire community to use. The submission process is ...

PROFESSIONAL DAST

Browser-powered scanning

By default, Burp Scanner uses an embedded Chromium browser to navigate during both the crawl and audit phases of a scan. This enables it to accurately ...

DAST

Integrating Burp Suite DAST with Slack

Cloud Self-hosted If you or your teams use Slack, you may like to set up an integration with Burp Suite DAST. Once configured, this enables you to receive ...

DAST

Managing the site tree

Cloud Self-hosted As you add more sites to Burp Suite DAST, you may find it useful to organize those sites into folders. For example, you could group your ...

PROFESSIONAL COMMUNITY

Getting started with the Inspector

The Inspector makes it easy to view and edit interesting items in HTTP messages. It automatically groups items from the selected request and response pair ...

PROFESSIONAL COMMUNITY

Enumerating usernames with Burp Suite

You can use Burp Intruder to insert a list of possible usernames into an authentication mechanism, such as a login form or registration form. This enables ...

PROFESSIONAL COMMUNITY

Testing for SQL injection vulnerabilities with Burp Suite

SQL injection vulnerabilities occur when an attacker can interfere with the queries that an application makes to its database. You can use Burp to test for ...