This release introduces support for HTTP Digest authentication, improves notifications and BApp restrictions, fixes several bugs, and updates Burp's browser. HTTP Digest authentication support We've r ...

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require extreme speed ...

This documentation describes the functionality of all editions of Burp Suite and related components. Use the links below to get started: ...

This lab uses a JWT-based mechanism for handling sessions. The server supports the jwk parameter in the JWT header. This is sometimes used to embed the correct verification key directly in the token.

If you need to use an external browser with Burp instead of Burp's preconfigured Chromium browser, perform the following configuration steps. For the vast majority of users, this process is not ...

When you launch a Burp Intruder attack, the attack runs in a new results window. This contains the attack results, and a clone of the configuration side panel from which the current attack is based.

Burp Suite is a comprehensive suite of tools for web application security testing. This interactive tutorial is designed to get you started with the core features of Burp Suite as quickly as possible.

This lab is vulnerable to username enumeration using its response times. To solve the lab, enumerate a valid username, brute-force this user's password, then access their account page. Log in using ...

BChecks - BChecks are custom scan checks that you can create and import. Burp Suite DAST runs these checks in addition to its built-in scanning routine, helping you to target your scans and make your ...

The process for installing Burp's CA certificate varies depending on which browser you are using. Please select the appropriate link below for detailed information ...

Before attempting to install Burp's CA certificate, make sure that you have successfully confirmed that the proxy listener is active and have configured your browser ...

CI-driven scans enable you to run Burp Scanner from a Docker container in your CI/CD environment. This is an easy way to integrate Burp Suite DAST with your CI/CD platform. It requires you to set up a ...