Results

PROFESSIONAL COMMUNITY

Manipulating WebSocket messages with Burp Suite

Finding vulnerabilities in WebSockets generally involves manipulating messages in ways that the application doesn't expect. For example, if you can modify ...

PROFESSIONAL

Creating custom scan checks

Custom scan checks enable you to extend Burp Scanner with your own vulnerability detection logic. You can create two types of custom scan checks: Scripts - ...

DAST

Which deployment method is right for me?

Which deployment method is right for me?

DAST

Coding custom integrations with GraphQL API

Cloud Self-hosted If Burp Suite DAST doesn't have a built-in integration for the platform where your APIs are stored, you can use the GraphQL API to push ...

DAST

Setting up email notifications

Cloud Self-hosted Setting up email notifications can help you to keep up to date with your organization's security posture. When you configure email ...

PROFESSIONAL COMMUNITY

Bypassing client-side controls

Some applications rely on measures on the client side to control the data that they submit to the server. This can lead to significant security flaws, as ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

PROFESSIONAL COMMUNITY

Unified installer FAQs

Is Community Edition changing? No. It's not going anywhere, and this change doesn't affect its features. Community Edition remains a key part of Burp Suite, ...

DAST

Viewing scan details

Cloud Self-hosted You can view details for running or completed scans in the Scans menu. The information available changes depending on the scan status. ...

PROFESSIONAL

Managing custom scan checks in your library

You can store and manage custom scan checks in the Extensions > Custom scan checks tab. This enables you to reuse your checks across your Burp projects. ...