PortSwigger Burp Review

• Proxy
• Repeater
• Intruder
• Extender API (and plug-ins)
• CSRF generator

This is by far the best application assessment tool I have used. It is more usable and has more features than most of the enterprise tools that cost 10-100 times as much.

I've used it for five years.

No issues encountered.

There are some memory issues, where the application runs out of memory and crashes. This is directly related to Java. This was improved after switching to 64-bit Java, but it still creeps up once in a while.

No issues encountered.

It's excellent.

It's very good.

I use many projects, but Burp is the best all round solution for manual application testing.

It's very straightforward, you just have to double-click a Jar file.

You get many features with the free product, but the real power is unlocked with the Pro version. The intruder is an amazing tool and makes the entire product worth purchasing, and the ability to perform automatic backups is well worth the small price of this product as well.