Burp Suite 专业版 2024.8.4

File size: 553.4 MB

Burp Suite is a reliable and practical platform that provides you with a simple means of performing security testing of web applications. It gives you full control, letting you combine advanced manual techniques with various tools that seamlessly work together to support the entire testing process. The utility is easy-to-use and intuitive and does not require you to perform advanced actions in order to analyze, scan and exploit web apps. It is highly configurable and comes with useful features to assist experienced testers with their work.

The main window displays all the available tools you can choose from and set each one’s settings the way you want. Being designed to work alongside your browser, the application functions as an HTTP proxy, thus all the HTTP/s traffic from your browser passes through the utility. This way, if you want to perform any kind of testing, you need to configure the browser to work with it.

The first thing you need to do is to confirm that the app’s proxy listener is active. Simply navigate to the Proxy tab and take a look in the Proxy Listeners section. You should see an entry in the table with the Running check box ticked. The second thing you are required to do is to configure your browser to use the app’s proxy listener as its HTTP proxy server. Finally, you need to configure the browser to be able to send HTTP requests through the app without problems. The previously mentioned utility gives you complete control over all of the actions you want to perform and get detailed information and analysis about the web applications you are testing. Using tools such as Intruder, Repeater, Sequencer and Comparer you are able to carry out different actions with ease.

With the help of Spider, you can crawl an application to locate its content and functionality. You are able to add new scope by selecting the protocol and specifying the host name or the IP range. Then the utility monitors all the transferred bytes and queued requests. The Intruder tool enables you to perform attacks against web apps. Simply set the host name and the port number, define one or more payload sets and you are done. You can also use the HTTP protocol by checking the proper box from the Target tab.

Another tool that automates testing tasks is called Sequencer, which analyzes the quality of randomness in an application’s session tokens. Firstly, you need to load at least 100 tokens, then capture all the requests. Overall, Burp Suite Free Edition lets you achieve everything you need, in a smart way. It helps you record, analyze or replay your web requests while you are browsing a web application.

Features of Professional Edition - Burp Proxy - Burp Spider - Burp Repeater - Burp Sequencer - Burp Decoder - Burp Comparer - Burp Intruder - Burp Scanner - Save and Restore - Search - Target Analyzer - Content Discovery - Task Scheduler - Release Schedule

Whats New

Burp Suite 是一个可靠的实用平台，它为你提供了一个简单的手段来进行Web应用的安全测试。它给你完全的控制权，让你结合高级的手动技术与各种无缝协作的工具来支持整个测试过程。这个工具易于使用且直观，并不需要你执行复杂的操作即可分析、扫描和利用Web应用程序。它高度可配置，并带有有用的特性以协助有经验的测试者完成他们的工作。 主窗口显示了你可以选择的所有可用工具，并按照你想要的方式设置每个工具的设置。 该应用设计为与你的浏览器一起工作，因此所有的HTTP/s流量都通过这个实用程序进行传输。这样，如果你想执行任何类型的测试，你需要配置浏览器使其能够与其配合使用。 首先要做的是确认应用程序的代理侦听器是否已激活。只需导航到代理标签并查看代理监听器部分。你应该在表格中看到一项内容，其中有一个运行勾选框被选中。接下来需要做的第二件事是配置你的浏览器将其HTTP代理服务器设定为应用程序的代理侦听器。最后一步是配置浏览器以通过应用程序发送HTTP请求而不会出现问题。 上面提到的工具为你想要执行的所有操作提供了完全控制权，并且为你测试的应用程序获取详细的信息和分析。 使用诸如Intruder、Repeater、Sequencer和Comparer等工具，您可以轻松地进行不同的操作。 借助Spider，你可以爬取应用以定位其内容和服务。你能够通过选择协议并指定主机名或IP范围来增加新的范围。然后，该实用程序会监控所有传输的字节和排队请求。 Intruder工具允许您对Web应用程序进行攻击。只需设置主机名和端口号，并定义一个或多个载荷集即可完成。你还可以在目标标签中选择HTTP协议。 另一个用于自动化测试任务的工具被称为Sequencer，它分析了应用程序会话令牌的质量随机性。首先需要加载至少100个令牌，然后捕获所有请求。 总体而言，Burp Suite免费版让你以聪明的方式实现你需要的所有功能。当你浏览Web应用时，它可以帮助你记录、分析或重放你的网络请求。 专业版特徵 - Burp Proxy - Burp Spider - Burp Repeater - Burp Sequencer - Burp Decoder - Burp Comparer - Burp Intruder - Burp Scanner - Save and Restore - Search - Target Analyzer - Content Discovery - Task Scheduler - Release Schedule 新特性

---

Download from free file storage

 Download from nitroflare.com  Download from rapidgator.net

---

我要反馈

---

本站不对文件进行储存，仅提供文件链接，请自行下载，本站不对文件内容负责，请自行判断文件是否安全，如发现文件有侵权行为，请联系管理员删除。