I tend to make use of this when I have discovered JavaScript injection within a PDF file, I can then quickly render the PDF without having to download the file and open it with a native application.

PDF Viewer adds an additional tab to the HTTP message viewer to allow for the rendering of PDF files within the Response view.

InQL – Introspection GraphQL Scanner Plugin.

The list of plugins we will cover in this post are: To take full advantage of the Burp Suite platform, this post will review some of the super useful BApp Store plugins that are freely available. Previously, we’ve written several posts on some of the tools we use, including Burp Suite. Burp is also highly configurable, and contains numerous powerful features to assist the most experienced testers with their work.At White Oak Security, we do a variety of engagement types.

Extensibility, allowing you to easily write your own plugins, to perform complex and highly customized tasks within Burp.īurp is easy to use and intuitive, allowing new users to begin working right away.

The ability to save your work and resume working later.

A Sequencer tool, for testing the randomness of session tokens.

A Repeater tool, for manipulating and resending individual requests.

An Intruder tool, for performing powerful customized attacks to find and exploit unusual vulnerabilities.

An advanced web application Scanner, for automating the detection of numerous types of vulnerability.

An application-aware Spider, for crawling content and functionality.

An intercepting Proxy, which lets you inspect and modify traffic between your browser and the target application.

Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.īurp gives you full control, letting you combine advanced manual techniques with state-of-the-art automation, to make your work faster, more effective, and more fun.īurp Suite contains the following key components: Burp Suite is an integrated platform for performing security testing of web applications.

Burp suite free download full version