Results

PROFESSIONAL COMMUNITY

Burp Proxy

Burp Proxy operates as a web proxy server between the browser and target applications. It enables you to intercept, inspect, and modify traffic that passes ...

PROFESSIONAL COMMUNITY

Mobile testing

You can use Burp Suite to perform security tests for mobile applications. To do this, you need to configure the mobile device to proxy its traffic via Burp ...

PROFESSIONAL COMMUNITY

Testing for XXE injection vulnerabilities with Burp Suite

XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of ...

PROFESSIONAL COMMUNITY

Maintaining an authenticated session

When testing, some actions may result in an application terminating your session. For example, an application may automatically log you out if you submit ...

PROFESSIONAL COMMUNITY

Set the target scope

Learn how to set the target scope in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Extension tutorials

These tutorials guide you through writing Burp Suite extensions using the Montoya API. Whether you're new to extension development or want to enhance Burp ...

DAST

Managing Kubernetes scanning resources

Self-hosted This page explains how to configure scanning resources on Kubernetes instances of Burp Suite DAST. Setting concurrent scan limits In theory, ...

PROFESSIONAL

Getting started with Burp AT

Burp AT pursues the goals you give it, choosing the right actions for each step and adapting as it learns about your target. This page walks you through ...

PROFESSIONAL

Viewing insertion points

The Insertion points panel in the Audit items tab contains a list of all the insertion points for a request. This enables you to better understand how much ...

PROFESSIONAL

Creating AI extensions

The Montoya API enables you to add advanced AI features into your Burp Suite extensions. Your extensions can now send prompts to a Large Language Model ...