Results

PROFESSIONAL COMMUNITY

Working with WebSocket messages in Burp Repeater

You can use Burp Repeater to manipulate and resend individual WebSocket messages, and analyze the application's responses. To send WebSocket requests with ...

DAST

Downloading logs and debug packs

Cloud Self-hosted This section describes how to download event logs and debug packs. Downloading the event log Cloud Self-hosted The event log can be useful ...

DAST

Monitoring scan progress

Cloud Self-hosted The Timeline shows you the progress of a scan, so that you can see what stage it's at and how much time remains. To monitor the scan ...

DAST

Optional settings for the CI/CD integration

In addition to configuring the integration between your CI/CD system and Burp Suite DAST, both the plugins and generic driver provide various optional ...

DAST

Integrating Burp Suite DAST with GitLab

If you or your teams use GitLab, you can integrate it with Burp Suite DAST. Once configured, this enables you to raise GitLab issues from directly within ...

PROFESSIONAL COMMUNITY

Scope

The Target > Scope tab enables you to tell Burp Suite which hosts and URLs you want to test. This has a number of advantages. For example, you can: Apply ...

PROFESSIONAL COMMUNITY

Managing scripts in your Bambda library

You can store and manage scripts in the Extensions > Bambda library tab. This enables you to organize your scripts for easy reuse across your Burp ...

PROFESSIONAL

Creating live tasks

Burp Suite's Live tasks feature enables you to perform some scanning operations automatically. You can use live tasks to audit for vulnerabilities, or add ...

PROFESSIONAL COMMUNITY

Decoding opaque data with Burp Suite

Burp Suite includes multiple tools for working with opaque data that isn't human-readable. You can use these while you analyze the attack surface, in order ...

PROFESSIONAL COMMUNITY

Testing for stored XSS with Burp Suite

Stored XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. In a ...