Using Burp Suite engagement tools

Burp Suite also has a number of tools that can be used for basic information gathering and target profiling. These tools are called engagement tools. In this recipe, we will discuss how to use the supplemental engagement tools in Burp Suite to gather or organize information on a target.

Getting ready

To use Burp Suite to perform web application analysis against a target, you will need to have a remote system that is running one or more web applications. In the examples provided, an instance of Metasploitable2 is used to perform this task. Metasploitable2 has several preinstalled vulnerable web applications running on TCP port 80. For more information on setting up Metasploitable2, refer to the Installing Metasploitable2 recipe in Chapter 1, Getting Started, of this book. Additionally, your web browser will need to be configured to proxy web traffic through a local instance of Burp Suite. For more information on setting up your browser with Burp Suite, refer...