It can be used in conjunction with manual mapping techniques to speed up the process of mapping an application's content and functionality.

The Burp Spider is a tool for automatically crawling web applications. Security testers can use Burp Scanner alongside manual testing methodology to quickly identify many types of common vulnerabilities. The Burp Scanner is a web application security scanner, used for performing automated vulnerability scans of web applications. This allows the interception, inspection and modification of the raw traffic passing in both directions. It operates as a web proxy server, and sits as a man-in-the-middle between the browser and destination web servers. The Burp Proxy tool lies at the heart of Burp's user-driven workflow, and gives a direct view into how the target application works 'under the hood'.

The suite of products consists of the following tools: Burp Proxy Burp is also highly configurable, and contains numerous powerful features to assist the most experienced testers with their work. It can automate all kinds of tasks in customizable ways, and lets you combine manual and automated techniques to make your testing faster, more reliable and more fun.īurp is easy to use and intuitive, allowing new users to begin working right away. It is designed to support the methodology of a hands-on tester, and gives you complete control over the actions that it performs, and deep analysis of the results. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities. Burp Suite by PortSwigger Web Security is an integrated platform for performing security testing of web applications.

Burp suite professional price