This comes in really handy when ensuring Scanner is still authenticated or ensuring Macros are working properly. It logs everything that Burp Suite sends. Trouble is, with some Burp Suite functions such as Scanner, Extender or Sequencer, the traffic is not visible within Burp Suite. If you have used Burp Suite for any extended period of time, you will fall in love with being able to see everything that your browser is communicating to a web application. Here’s a short list of extensions, in no particular order, that we use on nearly every engagement in 2019. Users can add features for nearly every type of web technology out there. It has solid performance, a ton of features, and most importantly, extensibility. When doing Web Application Penetration Tests, one tool dominates the desktops of most Security Consultants: Burp Suite Professional ( ). But, you can use both the community and professional versions of the Burp Suite tool to intercept traffic of mobile applications.The Top 8 Burp Suite Extensions That I Use to Hack Web Sites The Burp Suite tool is not available for Android. Subscription/License Cost:$5,595 for 5 concurrent scans/ $11,580 for 20 concurrent scans/ $23,550 for 50+ concurrent scans Link: How to Buy Burp Suite Enterprise Edition plan? Subscription/License Cost: $399 for 1 year / 798 $ for 2 year / $1197 for 3 year How to Download Burp Suite free for Windows/Mac/Linux? Extender - to add functionality by using BApps.Decoder - decode URL, HTML, Hex, Octal, Binary, etc.

Intruder - used for fuzzing of usernames, passwords, etc.Repeater - to modify requests and responses.Proxy - to intercept web application traffic.Although to exploit the full potential of the tool, you need a paid version of this tool. Most of the security researchers used the community edition of the tool. This tool is available as Burp Suite Community Edition, Burp Suite Professional, and Burp Suite Enterprise Edition. 90% of security professionals used this tool while performing a security audit of web applications. Burp Suite is the most popular tool used for the security assessment of web applications.

Burp suite professional