

While not the best looking tool (at least from my personal perspective), it has an absolute plethora of functionality for testing web application security. It is a proxy through which you can direct all requests, and receive all responses, so that you can inspect and interrogate them in a large variety of ways.

The tool is written in Java and developed by PortSwigger Security. If you’re not familiar with Burp Suite, here’s a brief overview, from Wikipedia:īurp or Burp Suite is a graphical tool for testing Web application security. And one of the tools that I’ve started using is an open source tool called Burp Suite.īefore I took on the role, I’d only heard a little about the software, when Dale Meredith briefly mentioned it in the Ethical Hacking course, which I took recently.
