What is a Burp Suite?
A set of tools for web application penetration testing is called the Burp Suite. It was created by a business called Portswigger, which is also the alias of the company's creator, Dafydd Stuttard. BApps are add-ons that may be added to extend the capability of BurpSuite, which is intended to be a full collection of tools. It is a better option than free alternatives like OWASP ZAP because of how simple it is to use.
There are three versions of Burp Suite:
- A public community edition.
- A professional version that costs $399 per year.
- An edition that costs $3999 per year.
An outline of BurpSuite's tools is provided in this article. We advise you to simply go through without giving any terms too much thought if you are a complete beginner in web apps beginning of the procedure, web application hacking, or bug bounty programs.
BurpSuite provides the following tools:
1. Spider
To map the target web application, a web crawler or spider is utilized. The mapping's goal is to compile a list of endpoints so that their functionality can be examined and potential security holes may be discovered. Spidering is done for the simple reason that the more endpoints you collect in recon, the more attack surfaces you will have when you are really testing.
2. Proxy
An intercepting proxy that is part of BurpSuite enables users to view and alter request and response content as it is being sent back and forth. Additionally, it eliminates the need for copy-pasting by allowing the user to pass the request or response under-watched to another relevant BurpSuite tool. The proxy server can be configured to run on a particular port and loop-back address. Also, the proxy may be set up to block particular kinds of request-response pairs.
3. Intruder
It's fuzzier. With this, a collection of values may be passed through an input point. A change in the response code or response content length is frequently the result of an anomaly. When selecting the payload position, BurpSuite supports single dictionary files and brute-force attacks. The intruder is used for:
- Assaults using brute force on passwords, pins, and other types of forms.
- Password fields on forms may be vulnerable to XSS or SQL injection due to dictionary attacks.
- Rate limiting on the web app is being tested and attacked.
4. Repeater
A user can submit requests repeatedly with manual adjustments using a repeater. It's used for:
- Checking to see if the user-provided values are being verified.
- How thoroughly is it being done to verify user-supplied values?
- What values are required by the server for an input parameter or request header?
- What happens whenever the server receives unexpected values?
- Is the server using input sanitation?
- How completely are the user-supplied inputs sanitized by the server?
- What kind of sanitation practices does the server utilize?
- Which cookie is the real sessions cookie out of all those that are present?
- If there is a means to bypass the CSRF protection, how is it implemented?
5. Sequencer
The sequencer, an entropy checker, determines if tokens produced by the web server are indeed random. Cookies & anti-CSRF credentials are a couple of examples of these identifiers that are usually used to use for identification in sensitive operations. For the probability of each potential character appearing at a place to be distributed equally, such tokens should ideally be created using a purely random process. Both at the character- and bit-level, this should be accomplished. An entropy analyzer verifies the validity of this idea. Assuming the tokens are random at first is how it operates. The tokens are then put to the test using specific requirements for specific characteristics. A minimum value of probability that the token will display for a feature is known as a significance level. Such that the idea that the token is random will be invalidated if it has features probabilities below a significant level. This tool may be used to identify weak tokens and list the components of those tokens.
6. Decoder
The common encoding techniques, such as URL, HTML, Base64, and Hex, are listed by Decoder. When looking for data blocks in the values of parameters or headers, this tool is useful. Additionally, it is used to create payloads for various vulnerability classes. It is used to identify the most prevalent instances of session hijacking and IDOR.
7. Extender
To extend the capabilities of the toolkit, Burp-suite allows the integration of other components. BApps are the term for such extraneous elements. These operate similarly to browser extensions. In the Extender window, they can be viewed, edited, installed, and removed. Some of them may be used with the free community version, but others need the professional version, which costs money.
8. Scanner
In the community edition, the scanning is unavailable. The website is automatically scanned for a range of common problems, and a listing of them is provided, together along with details on the reliability of each finding and the difficulties of exploiting them. It is frequently updated to include a label and lesser-known vulnerabilities.