Using Burp Suite to crawl a website

Burp is the most widely used tool for application security testing as it has functions that are similar to ZAP, with some distinctive features and an easy to use interface. Burp can do much more than just spidering a website, but for now, as a part of the reconnaissance phase, we will cover this feature.

Getting ready

Start Burp Suite by going to Kali's Applications menu and then navigate to 03 Web Application Analysis | Web Application Proxies | burpsuite, as shown in the following screenshot:

Getting ready

Then, configure the browser to use it as a proxy through port 8080, as we did previously with ZAP.

How to do it...

  1. Burp's ...

Get Kali Linux Web Penetration Testing Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.