Overview
Burp sits between the browser and the server so a tester can inspect, edit and replay every request.\nRepeater is for manual experimentation, Intruder for parameter fuzzing, and the scanner for automated checks of injection, access control and logic flaws.\nIt is the standard tool for web application assessment, available in a free Community edition and a paid Professional one.
Indicators of Compromise
Signals that suggest this is present on a system.
- Requests pausing at a proxy the user never configured
- Repeated near-identical requests with mutated parameters
- Scanner-style probe payloads in access logs