Burp Suite Reviews

“Powerful attacks on web apps in less time”

Pros

It's a very powerful tool that can run attacks on web applications in comparatively less time. The spider is especially strong and can really crack open the target.

Cons

Using this tool takes professional-level skills so it's not something I'd recommend to beginners.

“identify vulnerabilities before attackers do”

Pros

As a security analyst, this tool feels incredibly valuable when you're constantly uncovering bugs in web applications. It comes packed with thousands of features that help with penetration testing on virtually any web app making it possible to identify potential vulnerabilities and fix them before an outside attacker can use them to get into your organization's network. Features like website spidering, proxy tools and Intruder for brute-force password testing are all included and the fact that all of this is available for free makes it even more impressive. The only thing missing is project saving so you have to complete your testing in a single session.

Cons

A key negative point I keep noticing is that it could be more easy to figure out and a bit more user-friendly. At times, certain options are hard to locate or new features take some effort to understand. It would help a lot if there were quick, on-the-go guidance, maybe through a small toolbar that explains what each option does.

“Community edition includes almost everything”

Pros

One thing that really makes BurpSuite stand out is how lightweight it is. It can be installed on nearly any machine even older legacy systems and it still runs without issues. That makes it incredibly practical if you're working across different environments. On top of that, it comes with a huge set of features and the impressive part is that the community edition includes basically everything the paid version offers. The only thing missing in the free version is the ability to save projects and come back to them later but considering how much functionality is included at no cost, it still feels like an excellent deal.

Cons

The area where BurpSuite could really improve is the user interface. It is undoubtedly powerful and includes a lot of tools that help automate many types of attacks but the GUI does not feel very user-friendly. At times some menus and dropdowns even appear pixelated which hurts the overall experience. The visual side of the software could definitely be refined so it feels more polished and comfortable to use especially during longer sessions.

“Automatically organizes parameters into tables”

Pros

Using Burp Suite for man-in-the-middle testing has been really helpful because it automatically organizes request parameters into tables which makes analysis much more clearer.

Cons

Connecting the app to system web browsers such as Microsoft Edge or Google Chrome can be pretty troublesome. Since the entire system gets routed through a proxy, all system traffic ends up being monitored which creates complications.

“User-Friendly experience for everyone”

Pros

Lets users intercept traffic which makes it possible to inspect requests and try different variables and application bugs during testing. It also supports testing applications in a live traffic environment.The interface is easy to work with aswell.

Cons

One challenge is that some users may find the application difficult to use especially since proof-of-concept examples for testing new vulnerabilities may not always be available.