What is Burp Suite?
Burp Suite is an integrated platform for performing security testing of web applications.
It acts as a Man-in-the-Middle proxy, allowing you to intercept, inspect, modify, and replay
HTTP/HTTPS requests.
Intercepted Request Flow
GET /login HTTP/1.1
Host: vulnerable-site.com
User-Agent: Mozilla/5.0
Cookie: session=8f7a1c9e2b
→ Modified by attacker →
POST /login HTTP/1.1
username=admin'--&password=anything
Common Burp Tools
[ Proxy ] → Intercept & modify requests
[ Repeater ] → Replay requests for testing
[ Intruder ] → Brute force & fuzzing
[ Scanner ] → Automated vulnerability scan
[ Decoder ] → Encode/Decode payloads
Attack Phase Mapping
[ Information Gathering ] → Crawl, map application
[ Vulnerability Testing ] → SQLi, XSS, Auth bypass
[ Exploitation ] → Session hijacking, logic flaws
← Back to Tools
Home