Results

PROFESSIONAL

Burp AI

Burp Suite includes AI-powered features designed to enhance your security testing workflow. They enable you to uncover vulnerabilities more efficiently, ...

PROFESSIONAL COMMUNITY

Testing for privilege escalation

When a user logs in to an application, they usually only have access to the parts of the application that they need to perform their specific tasks. If ...

DAST

Performing a pre-scan check

Cloud Self-hosted You can perform a pre-scan check to: Make sure that Burp Suite DAST can reach your target URLs. Review and edit your recorded login ...

DAST

Managing groups locally

Cloud Self-hosted Groups allow you to map users to their relevant roles. This enables you to assign the permissions for a chosen set of roles to all the ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

DAST

Scanning web apps

Cloud Self-hosted You need to create a site in order to scan a web app. You can add an unlimited number of sites. In this context, the term web app refers ...

PROFESSIONAL COMMUNITY

Discovering supported hostnames with Burp Suite

You can use Burp Intruder to discover additional, hidden hosts that are in scope but aren't explicitly linked from the initial set of domains you're ...

PROFESSIONAL COMMUNITY

Creating scripts

Bambdas are lightweight, reusable Java-based scripts that enable you to fine-tune and extend Burp Suite's functionality. They can be used for tasks such as ...

PROFESSIONAL

AI credits

AI credits give you access to Burp Suite's AI-powered features. Whenever you use an AI-powered tool or an extension that interacts with an AI model, credits ...

DAST

Assigning scan limits

Self-hosted To avoid placing too much load on your scanning machines, you can limit the maximum number of concurrent scans that they can run. For newly ...