
The XSS Discovery Toolkit
9
Chapter 2 21
to write custom rules if you know what you are looking for. For instance, if you wanted to
find only XML files for debugging AJAX applications, a Burp proxy rule can be created to
capture just this information.
Ultimately, Burp is only one tool amongst a wide array of others that do parts of what
Burp does as well or better, but nothing works in quite the same way or with quite the
same power as Burp Suite. Burp Proxy is not for the faint of heart, but once you get accus-
tomed to it, it is a great learning tool for understanding ...