The Requirement for the Assignment is maximum 5000 words with complete elaboration of the main topic and also giving proper citation to this

UNIVERSITY OF BEDFORDSHIRE
LUTON CAMPUS




SUBJECT
CYBER DEFENCE (CIS098-6)




ASSIGNMENT TITLE
Burp Suite




SUBMITTED TO




SUBMITTED BY

(Masters in Cyber Security with Project Management)

,2



Table of Contents
Topic Name Page No
Background of Burp Suite 03
Introduction 03
Key Features 03
How Burp Suite can be used as Cyber Threat 04
Intelligence or Cyber Defense
Burp-supporting Operating Systems 05
Step-by-step Installation of Burp Suite in Kali 05
Linux
Burp Suite Configuration 09
Setup the Burp Suite 10
Types of Vulnerability which we can find in our 12
web application using Burp Suite
Example of CSRF (Cross-Site Request Forgery) 13
Websites to be used with Burp Suite for testing 18
purposes
Other Similar Tools 19
References 20

, 3


Background Of Burp Suite
Burp Suite is a software tool developed by PortSwigger, a UK-based company, that is widely used by
security professionals to perform web application security testing. The tool was first released in 2006
and has since become one of the most popular and widely used web application security testing tools in
the world.

Burp Suite is designed to be a comprehensive and user-friendly platform for web application security
testing, with a wide range of features and capabilities that allow testers to identify vulnerabilities and
weaknesses in web applications. Some of the key features of Burp Suite include a web proxy, a scanner,
an intruder, and a repeater, which enable users to analyze and manipulate HTTP requests and responses,
perform automated scans for vulnerabilities, and simulate attacks against web applications.

Burp Suite is available in both free and paid versions, with the free version offering basic functionality
and the paid version offering more advanced features and functionality. The tool is widely used by
security professionals, including penetration testers, security researchers, and security consultants, as
well as by developers and quality assurance professionals who need to ensure the security of web
applications.

Over the years, Burp Suite has evolved to keep up with the changing landscape of web application
security, with new features and capabilities being added to the tool to address emerging threats and
vulnerabilities. Today, Burp Suite is considered one of the essential tools in the toolkit of any web
application security professional, and it continues to be widely used and respected in the industry.

Introduction
Burp Suite is a software tool developed by PortSwigger, which is widely used by security professionals to
perform web application security testing. It is an integrated platform that combines a range of tools to
help users identify vulnerabilities and weaknesses in web applications.

Burp Suite is designed to be user-friendly and provides an intuitive interface for web application security
testing. It is available in both free and paid versions, with the free version offering basic functionality and
the paid version offering more advanced features and functionality.

Key Features
Burp Suite is widely used by security professionals, including penetration testers, security researchers,
and security consultants, as well as by developers and quality assurance professionals who need to
ensure the security of web applications.

Some of the key features of Burp Suite are mentioned below:

1. Web Application Scanning: Burp Suite's web application scanning feature is a powerful tool that
can be used to identify security vulnerabilities in web applications. Burp Suite can be used to
scan web applications for vulnerabilities such as SQL injection, cross-site scripting, and others.
In addition, Burp Suite offers advanced features for web application scanning, such as active
scanning and the ability to configure custom vulnerability checks.