Results

PROFESSIONAL COMMUNITY

Working with HTTP messages in Burp Repeater

You can use Burp Repeater to manipulate and resend individual HTTP requests, and analyze the application's responses. You can also add notes to each tab, to ...

PROFESSIONAL COMMUNITY

Setting up your extension development environment using the starter project

The starter project simplifies extension development using the Montoya API. Instead of setting up your development environment manually, you can download ...

PROFESSIONAL

Adding custom columns in the WebSockets history

You can use Java-based scripts to add powerful custom columns to the WebSockets history table. Custom columns enable you to see more detail about the items ...

PROFESSIONAL DAST

AI features

Burp Suite brings AI to your security testing in two complementary ways: Burp AT, which brings agentic AI to human-led pentesting, and Burp AI, which ...

PROFESSIONAL

Writing custom actions

You can write your own custom action scripts to extract, transform, and analyze data in Burp Repeater. Custom actions are written in Java, and are designed ...

PROFESSIONAL COMMUNITY

Testing horizontal access controls

When a user logs in to an application, they usually only have access to their own functions and resources. If access controls are incorrectly set, a user ...

PROFESSIONAL

Adding custom columns in Burp Logger

You can use Java-based scripts to add powerful custom columns to the Burp Logger table. Custom columns enable you to see more detail about the items that ...

PROFESSIONAL

Best practices for writing AI extensions

The Montoya API enables you to integrate AI-powered functionality into your Burp Suite extensions. Follow these best practices to ensure your extension is ...

PROFESSIONAL

Developing AI features in custom actions

Learn how to add AI-powered features to your custom actions using the Montoya API. For example, you could use AI to build custom actions that: Analyze ...

PROFESSIONAL COMMUNITY

Installing extensions manually

You can install extensions manually from a file. This is useful when: You want to use a custom extension in .jar, .py, or .rb format. For instructions, see ...