Burp Suite

Burp Suite is an integrated platform for performing security testing of web applications. It ranges from mapping and analyzing an application's attack surface to finding and exploiting vulnerabilities.

When to Use

• Penetration Testing: The #1 tool for manual security assessments.
• Advanced Attack Simulation: When you need to intercept, modify, and replay requests manually.
• Fuzzing: Sending thousands of payloads to find SQLi, XSS, or logic bugs (Intruder).

Core Concepts

Proxy

Intersects HTTP/S traffic between your browser and the target app. Allows you to pause, inspect, and modify requests on the fly.

Repeater

Lets you manually modify a request and resend it over and over to test how the server responds to different inputs.