Burp Suite is powerful due to its amazing set of tools. In this chapter, we will look at some of these. We will start with Target, covering Site map and Scope, and move to Proxy, which is the work horse for testers. Then, we move on to the attack tool of choice, Intruder. No matter how much we talk about Intruder, it will not be enough, as this versatile tool can be used in a multitude of ways and combinations. After Intruder, we cover the Scanner tool and discuss when it is a good time to use the Scanner tool. We end the chapter with the Repeater tool, which supercharges the manual testing part by making it dead simple to repeat requests and see responses.

Most of us get started using the Proxy tool of Burp. The fact that Burp always starts with the Intercept mode switched on means that for everyone, the Proxy tab is the first thing they will see and use in the Burp interface. Other tools in Burp Suite, such as the Target, Proxy, Intruder...