Results

PROFESSIONAL COMMUNITY

Identifying high-risk functionality with Burp Suite

You can use the Target site map and the Proxy history to identify high-risk functionality as you browse your target website. This enables you to plan how ...

PROFESSIONAL COMMUNITY

Credential stuffing with Burp Suite

Credential stuffing is a form of brute-force attack in which you attempt to log into a website using known username and password combinations from other ...

PROFESSIONAL COMMUNITY

Setting up your extension development environment using the starter project

The starter project simplifies extension development using the Montoya API. Instead of setting up your development environment manually, you can download ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

PROFESSIONAL COMMUNITY

Determining the session timeout

When a user doesn't use an application for a certain amount of time, most applications will automatically log out the user and destroy their session. To ...

PROFESSIONAL COMMUNITY

Testing for reflected XSS manually with Burp Suite

Reflected cross-site scripting (or XSS) occurs when an application receives data in an HTTP request and includes that data within the immediate response in ...

PROFESSIONAL COMMUNITY

Modifying HTTP requests with Burp Proxy

Learn how to use Burp Proxy to intercept and modify web traffic in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Testing for privilege escalation

When a user logs in to an application, they usually only have access to the parts of the application that they need to perform their specific tasks. If ...

PROFESSIONAL COMMUNITY

Filtering the site map with scripts

You can apply scripts to create powerful custom filters for your site map. You can do this in two ways: Load existing scripts - Load scripts from your ...

PROFESSIONAL COMMUNITY

Submitting extensions to the BApp Store

You can share extensions with the community by submitting them to the BApp Store. Contributing to the store helps create a powerful shared library of tools ...