Burp Suite - Application Security Testing Software & Penetration Tool for Kali Linux

Burp suite is a set of tools used for penetration testing of web applications. It is developed by the company name Portswigger, which is also of its founder Dafydd Stuttard. Burp suite aims to be an all in one set of tools and its capabilities can be enhanced by installing add on that are called BApps. It is the most popular tool among professional web app security researchers and bug bounty hunters. It is easy to use and make it more suitable choice over free alternative like OSWAPZAP.In the simplest form Burp suite can be classified as an interception proxy. While browsing their target application, a penetration tester can be configuring their internet browser to route trafficthrough Burp suite proxy server. Burp suite can acts as Man in the middle by capturing and analysing each request to and from the target web application so that they can be analysed. Penetration tester can pause, manipulate and replay individual HTTP requests in order to analyse and potential parameters. Potential parameters can be specified for as manual well as automate fuzzing attacks to discover potentially unintended application behaviours crashes and error messages.

Features Of Burp Suite Professional:

1. Intercepting
2. Sequencer
3. Intruder
4. Spidering
5. Repeater

How To Use Burp Suite?

Burp suite is an integrated platform for performing security testing of web applications. It is designed to be used by hands-on testers to support the testing process. With a little bit of effort, anyone can start using the core features of Burp to test the security of their applications. Some of Burp's more advanced features will take further learning and experience to master. All of this investment is hugely worth it-Burp's user-driven workflow is by the far the most effective way to perform web security testing, and will take you way beyond the capabilities of any conventional point-and-click scanner. Burp is intuitive and user-friendly, and the best way of learning is by doing. These steps will get you started with running Burp and using its basic features. You can then read on deeper into the documentation to become more proficient in using this supremely powerful tool.

Command Line:

Burp suite is a java application and is distributed via native platform installers or a standalone java executable file, with the .JAR extension. The native platform installers bundle Burp together with a private Java runtime environment, so you don't need to worry about installing or updating Java. The Burp JAR file can be executed using a Java Runtime Environment, and there is no need to unpack the contents of the JAR file itself.

To launch Burp, first open a command prompt. On windows, click the Start button, type "cmd" into the search box, and click on the "cmd" item under "programs".

On Mac OS X, in Finder, click on Applications, Utilities, and then Terminal.

On Linux, looks in your lists of applications for an item a called "console", "terminal" or "shell".

To run the .JAR version of the Burp suite you will you need to have Java installed on your machine. In the command prompt window, type: java -version If Java installed, you will see a message like: java version "1.7.0_67".

Burp requires a computer with the official Java Runtime Environment (64-bit edition, version 1.6 or later) installed. From the Oracle website, download the latest Java Runtime Environment (JRE), run the installer, and then open a new command prompt and start again.

On some platforms you may be able to run Burp directly by Double-clicking the Burp JAR or EXE file. However, it is preferable to launch the Burp JAR file from the command line, as this gives you more control over its execution, in particular the amount of memory that your computer assigns to Burp. To do this, in your command prompt type a command like: java -jar -Xmx2G / path / to burp. Jar where 2 is the amount of memory (in Gb) that you want to assign to Burp, and /path/to/burp. Jar is the location of the Burp JAR file on our computer.

Installation:

To download Burp Enterprise, log in to your account on portswigger.net and download the relevant Burp Suite Enterprise Edition installer, based on the operating system of your Enterprise server machine.

Installation instructions can be found in our Burp Enterprise Documentation.

Download Burp Suite: https://portswigger.net/burp