Spidering is a major part of recon while performing Web security tests.

Request/Response Details – The HTTP requests made & the responses from the servers.īurp Suite Tutorial Lab 1 : Spidering a website.

Requests Queue – Displays the requests being made.

Sitemap View – Displays the sitemap once spider has started.

Tool & Options selector Tabs – Select between Various tools & settings of Burp Suite.

They are described against the corresponding numbers as follows: In the above figure there are mainly 4 sections. The above figure shows the options & details about the target.

Like any other GUI/Windows tool, Burp Suite contains a standard menu bar, 2 rows of tabs & different set of panels as seen below. Before starting the burp spider, the Burp suite has to be configured to intercept the HTTP traffic. The burp spider is a program that crawls into all the pages of a target specified in the scope. The crawler is also referred to as a spider or automatic indexer.īurp Suite has got its own spider called the burpspider. Precisely a web crawler maps the structure of a website by browsing all its inner pages. Comparer & Decoder used for misc purposes that might come along the way when you conduct a Web Security testīurp Suite Tutorial – Spidering a WebsiteĪ web crawler is a bot program that systematically browses the pages of a website for the purpose of indexing.Extensibility, allowing you to easily write your own plugins, to perform complex and highly customized tasks within Burp.Sequencer: Used mainly for testing/fuzzing session tokens.

Repeater: Used for manipulating and resending individual requests.Intruder: Used to perform attacks & brute-forces on pages in a highly customizable manner.Scanner: Automatically scans for vulnerabilities just like any other automated scanners.Application-Aware Spider: Used for spidering/crawling a given scope of pages.

Burp suite tool download