


The proxy in Burp suite also can be configured to filter out specific types of request-response pairs. The proxy server can be run on a specific loop-back IP and a port. It also help the user to end the request or response under monitoring to another tool in Burp suite, it removes the copy-paste process. Proxy: Burp suite has an intercepting proxy that lets the user see and modify the contents of requests and responses while they are in transit. Spidering or crawling is done for a simple reason that the more endpoints we gather during our recon process, the more attack surfaces we possess during our actual testing. The mapping can give us a list of endpoints so that their functionality can be observed and potential vulnerabilities can be found. Some tools in Burp Suite Spider: Spider is a web spider/crawler that is used to make a map of the target website or web application. Let we know about a little bit about the tools used in Burp, then we go for the practices. Burp suite has various products, such as Spider, Proxy, Intruder, Repeater, Sequencer, Decoder, Extender, Scanner.
