A proxy listener is a local HTTP proxy server that listens for incoming connections from the browser. It enables you to monitor and intercept all requests and responses. By default, Burp creates a ...

You can set the type of payload that you want to inject into the base request. Burp Intruder provides a range of options for auto-generating different types of ...

This documentation describes the functionality of all editions of Burp Suite and related components. Use the links below to get started: ...

If you need to use an external browser with Burp instead of Burp's preconfigured Chromium browser, perform the following configuration steps. For the vast majority of users, this process is not ...

Burp Repeater opens each new HTTP or WebSocket message in a new tab. This enables you to work on multiple messages at once. You can use the controls on the tab header to create new tabs and make ...

Burp Collaborator is a network service that enables you to detect invisible vulnerabilities. These are vulnerabilities that don't: Trigger error messages. Cause ...

Burp Suite DAST is designed for automated scanning at any scale and enables integration with your software development processes. Like any security testing software, Burp Suite contains functionality ...

Burp's support for invisible proxying allows non-proxy-aware clients to connect directly to a Proxy listener. This is useful if the target application uses a thick client component that runs outside ...

You need to configure Firefox so that you can use it for testing with Burp Suite.

The process for installing Burp's CA certificate varies depending on which browser you are using. Please select the appropriate link below for detailed information ...

BChecks are custom scan checks that you can create and import. Burp Scanner runs these checks in addition to its built-in scanning routine, helping you to target your scans and make your testing ...

You can upload an OpenAPI definition, SOAP WSDL, or a Postman Collection to run a specific API scan. To begin configuring your scan, upload an OpenAPI definition, SOAP WSDL, or a Postman Collection in ...