Getting Started
Getting Started with Burp Suite
Documentation
Burp Suite Documentation
Take a look at our Documentation section for full details about every Burp Suite tool, function and configuration option.
| Burp Suite Professional and Community editions | Burp Suite Enterprise Edition |
| Burp Scanner | Burp Collaborator |
| Burp Infiltrator | Full Documentation Contents |
Extensibility
Burp Extender
Burp Extender lets you extend the functionality of Burp Suite in numerous ways.
Extensions can be written in Java, Python or Ruby.
| API documentation | Writing your first Burp Suite extension |
| Sample extensions | View community discussions about Extensibility |
Burp Testing Methodologies
These articles explain methodologies for using Burp Suite to test for various kinds of web application vulnerabilities. We plan to add more articles to this topic in the near future.
- Using Burp to Manually Test for Stored XSS
- Using Burp to Manually Test for Reflected XSS
- Exploiting XSS - Injecting into Tag Attributes
- Exploiting XSS - Injecting into Scriptable Contexts
- Using Burp to find Clickjacking Vulnerabilities
- Using Burp to Test for Code Injection Vulnerabilities
- Using Burp to Test for OS Command Injection Vulnerabilities
- Using Burp to Test for Path Traversal Vulnerabilities
- SQL Injection: Bypassing Common Filters
- SQL Injection in Different Statement Types