Burp Suite

The industry-standard web proxy & testing suite.

KaliParrotmedium

pkg: burpsuite

Burp Suite intercepts, inspects and modifies HTTP(S), with Repeater, Intruder, Scanner and extensions for deep web testing.

Syntax

burpsuite (GUI; set browser proxy to 127.0.0.1:8080)

Example

burpsuite

Proxy traffic, then use Repeater/Intruder to manipulate and fuzz requests.

Advantages
  • Best-in-class manual web testing
  • Huge extension store (BApp)
Disadvantages
  • Best features are Pro-only
  • Steep for beginners
Tags
#web#proxy#fuzzing

Official docs: PortSwigger

Related commands

Frequently asked questions

What is Burp Suite used for?
Burp Suite intercepts, inspects and modifies HTTP(S), with Repeater, Intruder, Scanner and extensions for deep web testing.
What is an example Burp Suite command?
A common example is: burpsuite — Proxy traffic, then use Repeater/Intruder to manipulate and fuzz requests.
Is Burp Suite part of Kali Linux?
Yes. Burp Suite ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install burpsuite.
What category of security tool is Burp Suite?
Burp Suite is a Web Application tool with a medium-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →