Burp Suite is similar to an interception proxy. While performing penetration tests on a targeted web application, Burp Suite can be configured so that all traffic is routed through its proxy server. This makes Burp Suite act as a man-in-the-middle attack by capturing and analyzing each web request to and from the web application. This enables the penetration tester to leverage features such as pausing, manipulating, and replaying requests in order to discover potential injection points in the target web application. These injection points can be defined manually or via automated fuzzing techniques.
Fuzzing or fuzz testing is a software technique that consists of discovering implementation bugs using malformed or semi-malformed packets in an automated fashion.
Burp Suite is currently available in three editions:
- Community: This is the free version, which...
