To exploit SQL injection vulnerabilities, it's often necessary to find information about the database. This includes: The type and version of the database ...

Burp Scanner is capable of detecting a wide range of vulnerabilities, which are flagged by the scanner as issues. This table lists all vulnerabilities that can be identified by Burp Scanner. It is ...

Burp Suite is a comprehensive suite of tools for web application security testing. This interactive tutorial is designed to get you started with the core features of Burp Suite as quickly as possible.

The following are some examples of simple extensions that use the legacy Extender API.

Web caches identify resources using a few specific components of each HTTP request, together known as the cache key. Two requests with the same cache key are regarded by the cache as equivalent. Web ...

BChecks are defined by importing .bcheck files into Burp Suite Professional. This section provides some example definitions that correspond to real-world use cases, and breaks down how each definition ...

In 2020, Apple began introducing a new type of processor for its Mac devices. You need to use a different version of the Burp Suite installer depending on which ...

This documentation describes the functionality of all editions of Burp Suite and related components. Use the links below to get started: ...

Many servers now support HTTP/2. This exposes them to potential vulnerabilities that are impossible to test for using tools that only speak HTTP/1. Burp Suite provides unrivaled support for ...

Burp Suite contains a wealth of features and capabilities to support manual and automated security testing. Use the links below for more information: Like any security testing software, Burp Suite ...

SQL injection vulnerabilities occur when an attacker can interfere with the queries that an application makes to its database. You can use Burp to test for these vulnerabilities: Professional Use Burp ...

You can test web applications and mobile apps using an iOS device. To do this, you need to do the following: Configure your Burp Proxy listener to accept connections on all network interfaces. Connect ...