is burpsuite good for pentestng?
burpsuite |
(Aug 15, 2024 12:10 PM)T3n Wrote: Definitely, it provides many useful features. Still using it to exploit requests. Just learn how to use it. wow thank you for the info
It is my favority and my go-to during pentesting and bug bounties. It allows to intercept and manipulate the http headers easily. This lets you try many different attack vectors on the target.
Highly recommend it. There's great youtube videos on it. Be sure to setup the foxy proxy correctly ;)
I also use burpsuite for pentesting. The free version can be used for most things you need in the daily business but some things are slowed down and the pro version has mutiple "vuln autodetection" features but it is expensive.
Alternative would be ZAP (https://www.zaproxy.org) but the work with even the free version of burp is more "user friendly" and as mentioned above: fits most needs ;-) |
|
|



![[Image: Untitled-3.png]](https://i.postimg.cc/yN60QJyT/Untitled-3.png)