Mastering Kali Linux for Web Penetration Testing

Going active with Spider

Burp Spider is a quick and convenient tool, but I recommend caution. Spidering can help speed up any pen testing processes, but the tool's own author recommends using it only for portions of very large applications or where time is of the essence and the risk is outweighed by schedule. That said, it is well worth understanding and having in your repertoire in case it is needed. The good news is that all of us have plenty of time to master it.

Spider's configuration is located on a single tab (look at the following screenshot), and gives us access to settings that can help us limit the impact of this noisy tool on our targets, automatically generate form filling data, attempt login, and pass special browser request ...