Results

PROFESSIONAL COMMUNITY

Troubleshooting Burp extensions

This guide helps you resolve common issues when using Burp extensions. If the troubleshooting steps in this guide don't resolve your issue, please contact ...

DAST

Performing a pre-scan check

Cloud Self-hosted You can perform a pre-scan check to: Make sure that Burp Suite DAST can reach your target URLs. Review and edit your recorded login ...

PROFESSIONAL COMMUNITY

Viewing requests sent by Burp extensions using Logger

Learn how to see the requests Burp Extensions are making in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Testing for prototype pollution with DOM Invader

Prototype pollution is a JavaScript vulnerability. It enables an attacker to add arbitrary properties to global object prototypes, which may then be ...

PROFESSIONAL

Testing for clickjacking

Clickjacking is a web security vulnerability that allows an attacker to trick users into clicking on hidden web page elements. It's done by overlaying a ...

DAST

Setting up a Cloud instance

Setup guide for a Cloud instance of Burp Suite DAST

PROFESSIONAL

Complementing your manual testing with Burp Scanner

In addition to its automated testing capabilities, Burp Scanner can also be a powerful tool in your manual testing workflow, enabling you to investigate ...

DAST

Architecture overview (Standard)

The following diagram shows the core components of Burp Suite DAST and the connections between them. DAST server The DAST server is the main application ...

DAST

Network and firewall rule reference

Cloud Self-hosted To run scans in Burp Suite DAST, you need to allow inbound and outbound network access between your sites and scanning resources. The ...

DAST

Tracking issues over time

Cloud Self-hosted Burp Suite DAST generates statistics and charts to help you track your progress over time. This page explains how to use the trend ...