Dictionary · Ethical Hacking Tools
Burp Suite
Web testing · Intermediate
An intercepting web proxy used to inspect and repeat HTTP requests during an authorized application test. It sits between the browser and the site you are allowed to test.
It lets a tester see the exact request a browser sends and the response that comes back. That visibility is for applications in scope, not for altering other people's sessions.
Example: During a test of a site the team owns, the proxy history shows a login request and the server's response code.
Git in the Zone explains security tools and attack terminology so you can recognize them and defend against them. Practice only on systems you own or have written permission to test. Nothing on this site runs a command or an exploit.
What it is for
Inspect and replay web requests for an application in an authorized test.
Authorized use: Use it only on systems you own or have written permission to test. Git in the Zone explains the tool; it does not launch it.
Operating systems: Windows, Linux, and macOS, using a Java runtime.
Language you will see
- proxy
- intercept
- repeater
- scope
How to read the options
- Proxy history: A list of requests the browser made through the tool, so a tester can review them later.
- Scope: The list of sites included in the test. Requests outside that list should not be attacked or modified.
Common misconception
- Intercepting your own test traffic is not the same as intercepting someone else's. The proxy is installed by the tester in their own browser path.