Viewing requests sent by Burp extensions using Logger.

Resending individual requests with Burp Repeater.

Augmenting manual testing using Burp Scanner.

Intercepting HTTP requests and responses.

Viewing requests sent by Burp extensions.

Testing for directory traversal vulnerabilities.

Testing for blind XXE injection vulnerabilities.

Testing for XXE injection vulnerabilities.

Testing for asynchronous OS command injection vulnerabilities.

Testing for OS command injection vulnerabilities.Bypassing XSS filters by enumerating permitted tags and attributes.Testing for web message DOM XSS with DOM Invader.Testing for SQL injection vulnerabilities.Testing for parameter-based access control.

Identifying which parts of a token impact the response.But, you can use both the community and professional versions of the Burp Suite tool to intercept traffic of mobile applications.Search Professional and Community Edition The Burp Suite tool is not available for Android. Subscription/License Cost:$5,595 for 5 concurrent scans/ $11,580 for 20 concurrent scans/ $23,550 for 50+ concurrent scans Link: How to Buy Burp Suite Enterprise Edition plan? Subscription/License Cost: $399 for 1 year / 798 $ for 2 year / $1197 for 3 year How to Download Burp Suite free for Windows/Mac/Linux? Extender - to add functionality by using BApps.Decoder - decode URL, HTML, Hex, Octal, Binary, etc.Intruder - used for fuzzing of usernames, passwords, etc.Repeater - to modify requests and responses.Proxy - to intercept web application traffic.Although to exploit the full potential of the tool, you need a paid version of this tool. Most of the security researchers used the community edition of the tool. This tool is available as Burp Suite Community Edition, Burp Suite Professional, and Burp Suite Enterprise Edition. 90% of security professionals used this tool while performing a security audit of web applications. Burp Suite is the most popular tool used for the security assessment of web applications.

Burp suite professional