EN:BurpSuite

DRAFT

This page is still a draft. Thank you for your understanding.

This article is also available in one or more other languages

To view this article in French, click here

Description

Burp Suite is produced by portswigger.net. As its name suggests, Burp Suite are several tools, all gathered in the form of plugins in a single tool. The professional (paid) version offers even more features than the free version (the latter does not include the feature "Scanner" and no customized attacks). The many functions available in the free version (Proxy, Spider, Intruder, Repeater, Sequencer , Decoder, Compare, etc..) make a complete analysis and test automation of web application vulnerabilities, as used by security auditors.

Summary

Download, installation and user interface Download and Installation User Interface Menu & Other Tabs Menu Comms Alerts Target Site map Scope Burp Proxy Intercept Options History Burp Spider Spider Other "control" Other "options" Results of the "spider" function Burp Scanner Burp Decoder What is Burp decoder? How do you use Burp decoder? Burp Comparer What is Burp Comparer? How do you use Burp Comparer? Types of comparison Examples of use

Burp Intruder What is Intruder? Other target positions Template Attack type payloads payload sets preset list runtime file custom iterator character substitution case substitution recursive grep illegal unicode character blocks numbers dates brute forcer null payloads Payload processing case match/replace encode Menu Attack Window

Burp Repeater What is Burp Repeater? Different Views raw params headers hex HTML/XML render viewstate Menu Burp Sequencer What is Burp Sequencer? Tests by Burp Sequencer Tests conducted Tests on characters Tests on bits Interpretation of results Significance level Reliability of results Analysis report How to use Burp Sequencer? Modes Live capture token location capture options Manual load Options