Getting Started
Getting Started with Burp Suite
Documentation
Burp Suite Documentation
Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.
| Burp Suite Professional and Community editions | Burp Suite Enterprise Edition |
| Burp Scanner | Burp Collaborator |
| Burp Infiltrator | Full Documentation Contents |
Extensibility
Burp Extender
Burp Extender lets you extend the functionality of Burp Suite in numerous ways.
Extensions can be written in Java, Python or Ruby.
| API documentation | Writing your first Burp Suite extension |
| Sample extensions | View community discussions about Extensibility |
Burp Testing Methodologies
These articles explain methodologies for using Burp Suite to test for various kinds of web application vulnerabilities. We plan to add more articles to this topic in the near future.
- Using Burp to Test for Components with Known Vulnerabilities
- Using Burp to Test for Open Redirections
- Using Burp to Detect SQL Injection Flaws
- Using Burp to Detect SQL Injection Via SQL-Specific Parameter Manipulation
- Using Burp to Exploit SQL Injection Vulnerabilities: The UNION Operator
- Using Burp to Detect Blind SQL Injection Bugs
- Using Burp to Exploit Blind SQL Injection Bugs
- Using Burp to Find Cross-Site Scripting Issues
- Using Burp Scanner to Test for DOM-Based XSS
- Exploiting XSS - Injecting into Direct HTML