Ethical Hacking Tools and Software - Port Swigger
Summary: PortSwigger describes Burp Suite as web application hacking software with over 50,000 users in more than 140 countries, built around Burp Proxy, a man-in-the-middle HTTP proxy that uses a self-signed CA certificate to view and edit encrypted HTTPS traffic. The page lists Burp Repeater for repeating request iterations, Burp Intruder for cycling payloads through set positions in a request, Burp Scanner for crawling and automated scanning, Burp Collaborator as the first out-of-band application security testing tool to fully integrate with an automated vulnerability scanner, and the Montoya API, supported from Burp Suite 2022.9.5, for writing extensions.
Why it matters: The same proxy that lets a tester read and edit HTTPS traffic is a man-in-the-middle by design, so the tool's value and its risk come from one capability - and it is in use across more than 140 countries.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026