Burpsuite: dev-tools on steroids

What is Burpsuite and why you should use it

As we’ve already hinted at, Burp Suite is a sort of Dev Tools on steroids. It’s a suite of web app tools that intercepts traffic and lets you inspect it, modify it, and even automate your testing.

But you don’t need to be a professional or have a ton of add-ons to get value from it. Being able to easily see and modify requests, and automate/create new requests will be a big help to you as a newbie, too.

As with most GUI-based tools, you won’t always be able to use them (for example, if you are limited to command-line tools on a server you are testing). So it’s still important to know the basics, like cURL, netcat, etc. probably should do so. 🙂

What can I use it for?

Basically you can use burpsuite whenever you want to intercept, examine, manipulate and change requests to or from a webserver. The core of burpsuite is the proxy which intercepts a web request and lets you change parameters, payloads, etc.