Burp Suite has many features that can help a penetration tester or ethical hacker. Two applications that are most commonly used in this tool are 'Burp Suite Spider', which can enumerate and record various pages and parameters of a website by examining cookies and initiating connections to web applications, and 'Intruder' which performs automated attacks on web applications.
Burp Suite is an excellent web hacking tool that many pentesters use to check for vulnerabilities in websites and web applications.
Burp Suite works by having detailed knowledge of the implementation of an HTTP protocol. This tool works through an algorithm that can be configured from the settings and can create malicious HTTP attack requests that a hacker uses.
Burp Suite is particularly useful for discovering vulnerabilities, such as SQL injections and cross-site scripting.
portswigger.net/burp/download.html
