Chapter 7: Working with Burp Suite

1. The Burp Suite proxy is the centerpiece. This enables Burp Suite to function as an interception proxy, allowing all the tools within Burp Suite to operate.
2. This scan analyzes the vulnerabilities of existing requests and responses. It does not submit any requests to the web application, therefore eliminating the amount of noise that can be detected.
3. This is used to manually manipulate the reissuing of HTTP requests. You can leverage a repeater to check what the output would be if an HTTP request is modified, for example, by using a SQL injection attack.
4. A cluster bomb provides the most comprehensive results, but it is also the most time-consuming, depending on the word lists that are used.
5. By using the BApp Store or third-party extensions that can be loaded into Burp Suite.