✓ The target site map shows all of the content that has been discovered in sites being tested.

✓ You can configure fine-grained interception rules that control precisely which messages are intercepted, letting you focus on the most interesting interactions. ✓ HTML5 WebSockets messages are intercepted and logged to a separate history, in the same way as regular HTTP messages. ✓ěurp supports invisible proxying for non-proxy-aware clients, enabling the testing of non-standard user agents such as thick client applications and some mobile applications. Host certificates are then generated for each domain that you visit, signed by the trusted CA certificate. On installation, Burp generates a unique CA certificate that you can install in your browser. ✓ěurp helps eliminate browser security warnings that can occur when intercepting HTTPS connections.

You can create rules that operate on message headers and body, request parameters, or the URL file path. ✓ You can use match and replace rules to automatically apply custom modifications to requests and responses passing through the Proxy. For example, you can unhide hidden form fields, enable disabled form fields, and remove JavaScript form validation. ✓ěurp Proxy can perform various automatic modification of responses to facilitate testing. ✓ You can annotate individual items with comments and colored highlights, letting you mark interesting items for manual follow-up later. ✓ The Proxy history records full details of all requests and responses passing through the Proxy. ✓ You can view, edit or drop individual messages to manipulate the server-side or client-side components of the application. ✓ěurp Proxy allows manual testers to intercept all requests and responses between the browser and the target application, even when HTTPS is being used. Proxy your HTTPS traffic, edit and repeat requests, decode data, and more.

Burp Suite Community Edition is a feature-limited set of manual tools for exploring web security.

Burp proxy free edition