Comprehensive Burp Suite Guide
Comprehensive Burp Suite Guide 🆕 Updated September 12, 2026 — added Doyensec’s Session Switcher extension and why deterministic session swapping removes a whole class of authorization-testing error. A practitioner’s reference for Burp Suite — core tools, essential extensions, Bambdas and BChecks, Collaborator, macros and session handling, custom extension development, Burp AI, and real-world testing workflows. Table of Contents Fundamentals Proxy Repeater Intruder Scanner Comparer, Decoder, Sequencer Collaborator (OAST) Macros & Session Handling Target, Sitemap & Scope Essential BApp Extensions Turbo Intruder Bambdas BChecks Writing Custom Extensions (Montoya API) Burp AI 2026 Feature Updates and Modern Extensions Keyboard Shortcuts Real-World Workflows Troubleshooting & Tuning Learning Resources 1. Fundamentals Burp Suite, from PortSwigger, is the de-facto web application security testing platform. It is an intercepting proxy with a rich toolbox for manual and semi-automated testing. Three editions ship today: ...