Results

PROFESSIONAL COMMUNITY

Manipulating WebSocket handshakes with Burp Suite

A WebSocket handshake is an HTTP message that establishes a WebSocket connection. You can often access additional attack surface by manipulating these ...

PROFESSIONAL COMMUNITY

Troubleshooting Burp extensions

This guide helps you resolve common issues when using Burp extensions. If the troubleshooting steps in this guide don't resolve your issue, please contact ...

PROFESSIONAL COMMUNITY

Getting started with the site map

The Target > Site map tab displays all the information that Burp gathers about websites. This information comes from a number of sources such as Burp ...

PROFESSIONAL

Getting started with Burp Collaborator

In this tutorial, you will learn how to manually use Burp Collaborator. You will test whether you can induce a target site to make a request to an arbitrary ...

PROFESSIONAL

Creating HTTP match and replace rules with scripts

You can create powerful match and replace rules using Java-based scripts. These enable you to perform custom modifications to HTTP messages as they pass ...

PROFESSIONAL DAST

Example configuration file

When you set up a private Collaborator server, you need to write a configuration file. You can refer to this example configuration file for guidance. This ...

PROFESSIONAL DAST

Best practice for recording login sequences

Burp Suite's recorded login sequence feature enables you to specify login details that Burp Scanner can use when performing authenticated scanning on ...

PROFESSIONAL

Running scans as part of your manual testing workflow

Burp Scanner is a web vulnerability scanning tool built into Burp Suite Professional. You can use Burp Scanner to automatically map the attack surface and ...

PROFESSIONAL COMMUNITY

Decoding opaque data with Burp Suite

Burp Suite includes multiple tools for working with opaque data that isn't human-readable. You can use these while you analyze the attack surface, in order ...

PROFESSIONAL COMMUNITY

Getting started with the Inspector

The Inspector makes it easy to view and edit interesting items in HTTP messages. It automatically groups items from the selected request and response pair ...