Burp suite

Owned by Ying Chen
Last updated: Jul 24, 2018
3 min read

Brief Description

Burp Suite is an integrated platform for performing security testing of web applications. It is designed to support the methodology of a hands-on tester, and gives you complete control over the actions that it performs, and deep analysis of the results. Burp contains several tools that work together to carry out virtually any task you will encounter in your testing. It can automate all kinds of tasks in customizable ways, and lets you combine manual and automated techniques to make your testing faster, more reliable and more fun.

Download

Before you can run Burp, you must first download the appropriate native platform installer or the Burp JAR file and complete the installation process. Burp Suite Professional users must also retrieve and install their unique Burp license key.

You can download Burp Suite Free Edition from the PortSwigger.net website. For Burp Suite Professional users, you can log in and download the latest Professional build using your account details.

Once you have installed the JAR file and license key you can follow our Getting started with Burp Suite tutorial pages to launch and configure Burp Suite.

To download the free edition of Burp Suite, go to thehttps://portswigger.net/burp page and click "Download now".

Launching Burp Suite from the Command Line

Burp Suite is a Java application and is distributed via native platform installers or as a standalone Java executable file, with the .JAR extension. You can download Burp Suite Free Edition from the PortSwigger.net website. For Burp Suite Professional users, you can log in and download the latest Professional build using your account details.

The native platform installers bundle Burp together with a private Java runtime environment, so you don't need to worry about installing or updating Java.

The Burp JAR file can be executed using a Java Runtime Environment, and there is no need to unpack the contents of the JAR file itself.

To launch Burp, first open a command prompt.On Windows, click the Start button, type "cmd" into the search box, and click on the "cmd" item under "Programs".

On Linux, look in your lists of applications for an item called "console", "terminal" or "shell".

To run the .JAR version of Burp Suite you will need to have Java installed on your machine.In the command prompt window, type:java -versionIf Java is installed, you will see a message like: java version "1.7.0_67".

On some platforms you may be able to run Burp directly by double-clicking the Burp JAR or EXE file.However, it is preferable to launch the Burp JAR file from the command line, as this gives you more control over its execution, in particular the amount of memory that your computer assigns to Burp. To do this, in your command prompt type a command like:java -jar -Xmx2G /path/to/burp.jarwhere 2 is the amount of memory (in Gb) that you want to assign to Burp, and /path/to/burp.jar is the location of the Burp JAR file on your computer.

Note: On some platforms, it may not be necessary to assign additional memory to Burp in this way. If Burp does run low on memory, it will display warnings in the Alerts tab. If this happens, you should start assigning additional memory to Burp when you launch it. For most tasks, assigning 4G of RAM will be sufficient, but you can assign more if you need it, and if your computer has sufficient memory to do so.

If everything is working, a splash screen should display for a few seconds, and then the Burp Suite startup wizard should appear.

Reference Guide

https://portswigger.net/burp/help/contents