Results

PROFESSIONAL COMMUNITY

Determining the session timeout

When a user doesn't use an application for a certain amount of time, most applications will automatically log out the user and destroy their session. To ...

PROFESSIONAL COMMUNITY

Testing for reflected XSS manually with Burp Suite

Reflected cross-site scripting (or XSS) occurs when an application receives data in an HTTP request and includes that data within the immediate response in ...

PROFESSIONAL COMMUNITY

Modifying HTTP requests with Burp Proxy

Learn how to use Burp Proxy to intercept and modify web traffic in Burp Suite Professional / Burp Suite Community Edition.

PROFESSIONAL COMMUNITY

Testing for privilege escalation

When a user logs in to an application, they usually only have access to the parts of the application that they need to perform their specific tasks. If ...

PROFESSIONAL COMMUNITY

Filtering the site map with scripts

You can apply scripts to create powerful custom filters for your site map. You can do this in two ways: Load existing scripts - Load scripts from your ...

PROFESSIONAL

Custom scan checks

Custom scan checks enable you to extend Burp Scanner with your own vulnerability detection logic. Use them to tailor scans to meet your testing requirements ...

PROFESSIONAL

Generating a CSRF proof-of-concept with Burp Suite

Cross-site request forgery (CSRF) attacks force a victim user to perform unintended actions on a website. If a website is vulnerable to CSRF, an attacker ...

PROFESSIONAL COMMUNITY

Submitting extensions to the BApp Store

You can share extensions with the community by submitting them to the BApp Store. Contributing to the store helps create a powerful shared library of tools ...

PROFESSIONAL

Setting the scan scope in Burp Suite Professional

The Scan details section of the scan launcher enables you to define the details of what will be scanned, including the URL from which the scan should start. ...

PROFESSIONAL COMMUNITY

Scoping the effort to audit a website

Before you start testing, it's useful to estimate how much time and effort is required to audit the target website. These are some of the factors that have ...