Burp Suite

Burp

The leading web application testing tool on the market. Burp has a free Community edition for basic web app testing and CTF workflows, and a Professional edition with a stronger Intruder, active scanner, Collaborator support, and access to more extensions.

Guides and Support Tools

• Burp Commander - Ruby command-line interface to Burp Suite's REST API

• https://burpsuite.guide/ - Get information on the usage of extensions along with other tips and tricksc

• https://www.blackhillsinfosec.com/using-simple-burp-macros-to-automate-testing/

• https://portswigger.net/support/using-burp-suites-engagement-tools

• SANS Burp Cheat Sheet - https://sansorg.egnyte.com/dl/x19ByeTOpS

• IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Platform Components

• Dashboard - Burp's dashboard lets you control and monitor Burp's automated activity:

  • https://portswigger.net/burp/documentation/desktop/dashboard

  • https://portswigger.net/blog/the-new-dashboard

• Target - The Target tool contains the site map, with detailed information about your target applications. It lets you define which targets are in scope for your current work, and also lets you drive the process of testing for vulnerabilities.

  • https://portswigger.net/burp/documentation/desktop/tools/target

  • How to Spider Web Applications using Burpsuite

• Proxy - Burp Proxy lies at the heart of Burp's user-driven workflow, and lets you intercept, view, and modify all requests and responses passing between your browser and destination web servers.

  • https://portswigger.net/burp/documentation/desktop/tools/proxy

  • https://www.hackingarticles.in/burp-suite-for-pentester-configuring-proxy/

• Intruder - Burp Intruder is a powerful tool for automating customized attacks against web applications. It can be used to automate all kinds of tasks that may arise during your testing.

  • https://portswigger.net/burp/documentation/desktop/tools/intruder

  • https://portswigger.net/burp/documentation/desktop/tools/intruder/using

  • https://www.hackingarticles.in/burp-suite-for-pentester-fuzzing-with-intruder-part-1/

  • https://www.hackingarticles.in/burpsuite-for-pentester-fuzzing-with-intruder-part-2/

• Repeater - Burp Repeater is a simple tool for manually manipulating and reissuing individual HTTP requests, and analyzing the application's responses. You can send a request to Repeater from anywhere within Burp, modify the request and issue it over and over.

  • https://portswigger.net/burp/documentation/desktop/tools/repeater

  • https://portswigger.net/burp/documentation/desktop/tools/repeater/using

  • https://www.hackingarticles.in/burp-suite-for-pentester-repeater/

• Sequencer - Burp Sequencer is a tool for analyzing the quality of randomness in a sample of data items. You can use it to test an application's session tokens or other important data items that are intended to be unpredictable, such as anti-CSRF tokens, password reset tokens, etc.

  • https://portswigger.net/burp/documentation/desktop/tools/sequencer

• Decoder - Burp Decoder is a simple tool for transforming encoded data into its canonical form, or for transforming raw data into various encoded and hashed forms. It is capable of intelligently recognizing several encoding formats using heuristic techniques.

  • https://portswigger.net/burp/documentation/desktop/tools/decoder

  • Burpsuite Encoder & Decoder Tutorial

• Comparer - Burp Comparer is a simple tool for performing a comparison (a visual "diff") between any two items of data.

  • https://portswigger.net/burp/documentation/desktop/tools/comparer

  • https://www.youtube.com/watch?v=lT56Z54K-Jo

• Logger - Logger is a tool for recording network activity. Logger records all HTTP traffic that Burp Suite generates, for investigation and analysis

  • https://portswigger.net/burp/documentation/desktop/tools/logger

  • https://github.com/PortSwigger/logger-plus-plus

• Extender - Burp Extender lets you use Burp extensions, to extend Burp's functionality using your own or third-party code.

  • https://portswigger.net/burp/documentation/desktop/tools/extender

• Project Options - Burp contains a large number of suite-wide options that affect the behavior of all tools.

  • https://portswigger.net/burp/documentation/desktop/options

  • https://www.hackingarticles.in/burp-suite-for-pentester-burps-project-management/

  • https://www.youtube.com/watch?v=CdcJcdp-ObQ

• Collaborator - Burp Collaborator is a network service that Burp Suite uses to help discover many kinds of vulnerabilities.

  • https://portswigger.net/burp/documentation/collaborator

  • https://www.hackingarticles.in/burp-suite-for-pentester-burp-collaborator/

Payloads

• Payload Processing Rule in Burp suite (Part 1)

• Payload Processing Rule in Burp suite (Part 2)

• Beginners Guide to Burpsuite Payloads (Part 1)

• Beginners Guide to Burpsuite Payloads (Part 2)

Burp Extensions

Collections

• Awesome Lists Collection: Burp Extensions

• Bug Bounty Forum's Burp Extensions List

Multi-Vuln Scanners

• HUNT - HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions, collected by Bug Crowd.

• BurpBounty - This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive Burp Suite scanner by means of personalized rules through a very intuitive graphical interface.

  • Burp Bounty Pro - Premium bundle of vulnerability profiles to scan for.

• VulnersScan - Burp Suite scanner plugin based on Vulners.com vulnerability database API

  • Same thing as https://portswigger.net/bappstore/c9fb79369b56407792a7104e3c4352fb

• Active Scan++ - Burp Scanner automates the task of scanning web sites for content and vulnerabilities. Depending on configuration, the Scanner can crawl the application to discover its content and functionality, and audit the application to discover vulnerabilities. Active Scan++ is an extension that expands the scanning capabilities of Burp Suite.

  • https://portswigger.net/burp/documentation/desktop/scanning

  • https://www.hackingarticles.in/burp-suite-for-pentester-active-scan/

• ParamMiner - This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.

Single Vuln Scanners

• Retire.JS - Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

• sqlipy - SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

• Backslash powered scanner - Active scan for SSTI detection

• CSRF Scanner - Passive CSRF detection.

• Freddy - Find Deserialization Bugs

• JSON Web Tokens - decode and manipulate JSON web tokens

• Web cache deception scanner - Tests applications for the Web Cache Deception vulnerability.

• HTTP Request Smuggler - Active scanner and launcher for HTTP Request Smuggling attacks

• Upload Scanner - Tests various upload vulnerabilities

• SSRF-King - Burp plugin that automates SSRF detection across requests.

• shelling - a comprehensive OS command injection payload generator

• Autorize - Tool for detecting authorization vulnerabilities such as IDOR.

• Java Deserialization Scanner - Active and passive scanner to find Java deserialization vulnerabilities

Utility

• Hackbar - Hackbar is a plugin designed for the penetration tester such in order to help them to speed their manual testing procedures**.**

  • https://www.hackingarticles.in/burp-suite-for-pentester-hackbar/

• Burp-Send-To - Adds a customizable "Send to..."-context-menu to your Burp Suite. Handy for easily sending data into another tool like SQLmap

• Turbo Intruder - Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require extreme speed or complexity.

• burp-exporter - Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

• Flow - History of all burp tools, extensions and tests. Handy to pull all your results together

• Decoder Improved - Decoder Improved is a data transformation plugin for Burp Suite that better serves the varying and expanding needs of information security professionals.

• web3-decoder - Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks (like Polygon, Arbitrum, BSC...)

  • https://research.nccgroup.com/2022/11/10/tool-release-web3-decoder-burp-suite-extension/

• WSDLer - This extension takes a WSDL request, parses out the operations that are associated with the targeted web service, and generates SOAP requests that can then be sent to the SOAP endpoints.

• WSDL Wizard: This extension scans a target server for WSDL files. After performing normal mapping of an application’s content, right click on the relevant target in the site map, and choose “Scan for WSDL files” from the context menu. The extension will search the already discovered contents for URLs with the .wsdl file extension, and guess the locations of any additional WSDL files based on the file names known to be in use. The results of the scanning appear within the extension’s output tab in the Burp Extender tool.

Burp Training

• https://tryhackme.com/room/burpsuitebasics

• https://tryhackme.com/room/burpsuiterepeater

• https://tryhackme.com/module/learn-burp-suite

Burp Suite Essentials Series by PortSwigger

Advanced Burp Suite by Bugcrowd Univeristy

Hacker101 Burp Suite Series

• https://www.hacker101.com/playlists/burp_suite.html - 3 video series by Hacker101

Portswigger's Web Security Academy

• https://portswigger.net/web-security - The big training platform for Web Security Testing by the makers of Burp Suite.