// what it is
Description
PortSwigger's Java-based suite that bundles an intercepting proxy, repeater, scanner, intruder, decoder, comparer, and an extension ecosystem (BApp Store, Burp Extender API). The free Community edition is more than enough for most CTF + bug-bounty work; Pro adds the active scanner and Intruder at full speed.
// use cases
What people use it for
- Intercept and tamper with any web app request
- Replay+mutate requests in Repeater for vuln verification
- Automated scanning of complex modern web apps (Pro only)
- Burp Collaborator for OAST (out-of-band) interaction tests
// commands
The commands you'll type
Set HTTP proxy for curl
$ curl --proxy http://127.0.0.1:8080 -k https://target.tld