Let's use the Burp Suite Spider to perform the web application attack:
- To begin automatically spidering the web content from your previously defined scope, click on the Spider tab at the top of the screen. Underneath, there are two additional tabs that include Control and Options.
- The Options tab allows the user to define the configurations for how spidering is performed. This includes detailed settings, depth, throttling, form submissions, and so on. It is important to consider the configurations of an automatic spider, as it will be sending requests to all in-scope web content. This could potentially be disruptive or even damaging to some web content.
- Once configured, the Control tab can be selected to begin automatic ...