security enabled verified medium v1.0.0

burpsuite

Integrated platform for web application security testing with proxy, scanner, intruder, repeater, and decoder tools.

📋 Live Preview 
burpsuite
burpsuite

Sandbox: execFile · Timeout: 3600s

Capabilities

web.proxy.intercept
web.scan.active
web.scan.passive
web.fuzzing
web.session.handling
web.decoder
web.repeater
web.intruder

Parameters

Name Type Required Default Description Aliases
collab-config file No - Collaborator server configuration file --collaborator-config
project-file file No - Project file to load --project-file
use-defaults boolean No - Start with default configuration --use-defaults
diagnostics boolean No - Show diagnostics information --diagnostics
help boolean No - Display help information --help, -h

Artifacts

TypeDescriptionMIMESchemaTrust
web.scan.projectBurp Suite project fileapplication/octet-stream-verified
web.scan.reportBurp Suite scan reporttext/html-verified

Contract

Inputs

web.target.url

Target application URL

web.target.host

Target hostname or IP

Outputs

web.scan.report

HTML scan report

web.scan.project

Burp project file

Side effects: network_trafficnetwork_traffic

Workflow Edges

Produces

web.scan.reportweb.scan.project

Consumes

web.target.urlweb.target.host

Resource Profile

ResourceValue
CPUhigh
Memory1024 MB
Networkmedium
Disk I/Olow

Examples

Launch Burp Suite with default configuration

burpsuite --use-defaults

Launch Burp Suite with a specific project file

burpsuite --project-file /path/to/project.burp

Launch with custom Collaborator configuration

burpsuite --collaborator-config collab.config

Show diagnostics and troubleshooting info

burpsuite --diagnostics

Documentation

Burp Suite — Web Application Security Testing Platform

Burp Suite is an integrated platform for performing security testing of web applications. It includes a proxy, scanner, intruder, repeater, sequencer, decoder, and extender tools.

Key Components

  • Proxy: Intercept and modify HTTP/HTTPS traffic between browser and target
  • Scanner: Automated vulnerability scanning (active/passive)
  • Intruder: Automated parameter fuzzing and brute-forcing
  • Repeater: Manual request modification and replay
  • Decoder: Decode/encode data in various formats
  • Extender: Extend functionality via BApp store plugins

Basic Usage

# Launch Burp Suite Community Edition
burpsuite

# Launch with project file
burpsuite --project-file project.burp

# Use defaults (skip config prompts)
burpsuite --use-defaults

Operational Security

  • Burp Suite CA certificate must be installed in the browser for HTTPS interception
  • Burp Intruder can generate substantial traffic; use rate limiting responsibly
  • Scanning without authorization is illegal in many jurisdictions

Related Tools

owasp-zapniktowhatweb

References