BurpSuite Reviews

Burp is a one-stop shop for vulnerability assessments. The extensions should never be overlooked because you can find the most helpful tools there to increase your burp's performance.

I wish there was a built in tool that would help find easily overlooked information such as information leakage (for personal data, financial data, and so on). Something that highlights requests.

Burp allows me to intercept and manipulate HTTP requests in real-time. It is also a scanner (if you have the PRO version of course). Their clickbandit feature is great.

It has many features to find vulnerability like repeater, sequencer, decoder, scanner and spider etc. One of the best tool for pentesting. Proxy is awesome feature to intercept and modify the request and response. UI is very easy and simple.

Not find any issues in this tool. All the features has work properly.

To secure an applications we must use Burp suite. It will find all the issues and provide the remediation to fixed it. Very easy to use. It has multiple features to find the different vulnerabilities.

This is the only tool I use for my penetration testing projects. Especially for web applications. All the features like proxy, intruder, reapeter and much more makes the life of a analyst very easy. No other tool can stand against Burp suite.

Although are are no reason to dislike this tool I found one thing very annoying. That is the display of it's interface. It doesn't allow user's to adjust the font size. So in screen with high res you might face some problems.

Burp suit's multiple features especially reapeter, intruder and proxy makes it easy to analyse request and response in an application to find vulnerabilities. Make my work efficient.

The preferred toolbox for web security testers is Burp Suite Professional. Use it to automate routine testing processes, and then use its specialised manual and semi-automated security testing capabilities to delve further. Burp Suite Professional can assist you in conducting tests for the OWASP Top 10 Vulnerabilities and the most recent hacking methods.

There isn't anything about it that I dislike.

Testing apps can be mapped out with the aid of Burp Suite. Additionally, it features a fantastic automatic scanner for finding web application security holes.

Burp has all the tools that is needed for Ethical hacking

the professional version is little expensive

yes is have solved for example capturing the request

It's good to analyse behaviour of application and good api extension that we can integrate which make our work more easy

If we install many plugins it hang sometimes if you have less RAM and too much false results I encounter over automation scan

Intruder is good part we don't need different tools for brute force , user friendly

The best tool in the market, a lot of available extenders, good support, easy to use tool interface, fine-tuning options, regular updates

I am not happy with the high price of the tool, some of the querries in the community support pages still don't have a proper answer or solution

I use it for penetration testing. I find bugs and vulnerabilities and report it

Its the best paid web app penetration testing tool on the market.

I can't think of anything that I don't like about it.

Burp Suite helps to map out applications that you are testing. It also has an amazing automated scanner to find web application vulnerabilities

I am a Cyber Security Researcher, and BurpSuite has become a part of my day-to-day life. It helps me to test the security of our client websites. I use BurpSite Pro, which has awesome features that help me do web application testing easily. I can easily run an Automatic scan to find the common bug in the website, and it provides a detailed report of the scan and gives less false positives. The feature I love the most is intercepting all browser traffic and analyzing it. It has a feature called a repeater, I can easily capture the browser request, and without actually sending the request on the browser, I can repeat the send request multiple times. BurpSute has few attack modes, and the benefit of using BurpSuite pro is it has a few extra features. Like I can easily use a custom wordlist and increase the number of threads to run an attack. BurpSuite is the best and most powerful tool for security researchers.

There is nothing to dislike in the burp suite. Sometimes it crashes I use a high number of threads. But It can be managable. Other than this, it's an excellent tool.

My job is to do the clients website testing; burp suite pro helps me do web pen-testing easily and effectively. Its pro features, like automatic scan and less false positives, reduce my job tasks.

You can do pretty much all your web-pentest through burp suite, from fuzzing parameters to exploiting injections and decoding data. Burp does it all!

There's no complains about the tool, everything you need is in there. The only thing is that you will have to study quite a lot to understand all the functionalities. I've been using the tool for 1 year and I feel I still have a lot to learn.

Performing web application pentests.