← All tools

Burp Suite

https://portswigger.net/burp

Freemium ◆ Kali Linux

Categories

Web Application

Description

Leading platform for web application security testing. The Community Edition includes an intercepting proxy, repeater, intruder, and decoder. The Pro edition adds the automated scanner, Collaborator, and advanced features.

Keywords

web proxy interceptor scanner fuzzer spider HTTP HTTPS XSS SQLi IDOR web testing

Example Usage

# Launch and configure browser proxy to 127.0.0.1:8080
# Intercept, modify, and replay HTTP/S requests
# Use Intruder for fuzzing, Repeater for manual testing

See also

GraphQL Voyager / InQL

Open Source

InQL is a Burp Suite and standalone GraphQL security scanner. Analyzes introspection queries, genera…

SQLiDetector

Free

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error …

JWT_Tool

Open Source

Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities includ…

OWASP ZAP

Open Source Kali

OWASP's Zed Attack Proxy — one of the world's most popular free web application security scanners. F…

juice-shop-ctf

Open Source

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FB…

Burp Suite Extensions (BApp Store)

Freemium

Marketplace of extensions for Burp Suite covering active/passive scanning, custom insertion points, …