burpsuite
Repo
https://portswigger.net/burp
Community edition available free from PortSwigger.
Installation
# Download Community or Pro from portswigger.net
# Launch
java -jar burpsuite_community.jar
# Kali often ships with it or via apt
Using
# Start Burp → set browser proxy to 127.0.0.1:8080
# Install CA certificate from http://burpsuite
# Core workflow:
# - Proxy: intercept + history
# - Repeater: manual request editing
# - Intruder: controlled fuzzing
# - Scanner (Pro): active scanning
# - Collaborator: out-of-band detection
Current Step
Manual traffic interception, request manipulation, and validation of automated findings.
Next Step
Use Repeater / Intruder on interesting requests from httpx / nuclei / ffuf. Confirm impact and write the report.
Errors Fixes
- Certificate warnings → install Burp CA in browser and system trust store
- Java version → use a supported JDK
- Low memory → increase -Xmx in the launch command
- Community limits → Pro required for full scanner and some extensions