Workshop: Getting Comfortable in Burp Suite with BB King

Or, if you just want to know how to use Burp Suite to do all the magical things you’ve heard about, this will get you started faster than just about any other option.

We will start with the key functional areas of Burp Suite and how they are used by professional testers every day. Then we will look into the Settings area where some useful functionality is hidden and where you can customize Burp to fit your testing style and available resources. We’ll talk about the Collaborator server, how to route traffic through a jump box to get access to an internal network, custom payload lists, and helpful match-and-replace rules that make common tests simple and repeatable.

Along the way, we’ll use OWASP’s Juice Shop as a safe target to try things out, hands-on.

A small part of what we cover is only available in Burp Suite Pro, which requires a paid license, but the majority of the material works in the free Community version as well.