Burp Suite Professional

BChecks

Customize your scanning by incorporating community-created scan checks from the BChecks library, or write your own with an easy-to-learn, purpose-built language.

"The BChecks from Burp are truly remarkable. They have allowed me to automate a significant portion of my personal checks with ease and convenience. The integration with live tasks makes them super efficient. Exceptional job, PortSwigger!"Oli (C.. 1..P.H.Y), Researcher and Pentester

What are BChecks?

BChecks offer a powerful and efficient way to customize scan checks for Burp Scanner. Either download from the BChecks library or create them using a simple and easy-to-learn, domain-specific language.

Use a BCheck to respond quickly to newly identified threats by creating and running a highly specific scan check to detect a particular CVE.

Explore the growing library of community-created BChecks to see how others are enhancing their security testing workflows.

Where can I access BChecks?

BChecks are available in both Burp Suite Professional and Burp Suite Enterprise Edition. Write your own custom BChecks - tailored specifically to your own application - in Burp Suite Professional, or select a community-made BCheck from the BCheck library, and import them directly into Burp Suite Enterprise Edition.

Burp Suite Professional

Burp Suite Enterprise Edition

BChecks in Burp Suite Professional

You can create, test, and apply BChecks in Burp Suite Professional.

Extend the range of vulnerabilities that Burp Scanner looks for without the hassle of building an extension using the Java-based Montoya API.

Once loaded within the BChecks tab, you can run custom scan checks that are highly tailored to your specific use case.

BChecks in Burp Suite Enterprise Edition

You can upload BChecks into the BChecks tab of the Extensions section and enable them on a site/folder level to be applied to any scans that target that site.

Any vulnerabilities identified from those BChecks will be displayed in the Issues tab alongside any other issues enabled by your scan configuration.

BChecks

What are BChecks?

Where can I access BChecks?

Burp Suite Professional

Burp Suite Enterprise Edition

BChecks in Burp Suite Professional

BChecks in Burp Suite Enterprise Edition

Expand your scanning capabilities