Burp Suite

What is Burp Suite?

Thousands of organizations use Burp Suite to find security exhibits before it's too late. Using state-of-the-art scanning technology, you can identify the latest vulnerabilities. Their researchers often discover new classes of vulnerability that Burp is the first to report.

Burp Suite constantly raises the level of what security tests are capable of achieving.

Coverage of more than 100 generic vulnerabilities, such as SQL injection and cross-site scripting (XSS), with excellent performance against all vulnerabilities in the top 10 of OWASP.

Burp pioneered the use of innovative out-of-band (OAST) techniques to increase the conventional scanning model. Burp Collaborator technology allows Burp to detect server-side vulnerabilities that are completely invisible in the external behavior of the application and even report vulnerabilities that are fired asynchronously upon the completion of the scan.

Burp's scanning logic is continuously updated with enhancements to ensure that it finds the latest vulnerabilities and new cases of existing vulnerabilities. In recent years, Burp was the first scanner to detect new vulnerabilities created by the Burp research team, including model injection and web cache poisoning.

Burp's cutting-edge web app crawler accurately maps content and functionality, automatically handling sessions, state changes, volatile content, and app logins.

Burp Infiltrator technology can be used to perform interactive application security testing (IAST), instrumenting target applications to provide real-time feedback to Burp Scanner when its loads reach dangerous APIs in the application.

All reported vulnerabilities contain detailed custom warnings. These include a full description of the issue and step-by-step correction advice. Advisory writing is generated dynamically for each individual edition, with any special features or correction points accurately described.

System Requirements

Burp requires a computer with official Java Runtime Environment (version 1.6 or later) installed. JREs are available for several popular operating systems, including Windows, Linux, and Mac OSX.