The main features of this new product are: server installation, access via a modern web interface and REST API. Burp Suite Enterprise Edition is a enterprise server class solution for the automated and planned continuous scanning solution, capable of performing a high volume of simultaneous scans (only the amount of agent must be authorized to cover the required instance). Burp Suite is available in BackTrack, but for more information or to download burp Suite as a standalone file, check out Burp Suite can be opened in BackTrack via apps → BackTrack → Vulnerability Assessment → Web Application Assessment → Web Application Proxies → Burpsuite, as shown in Figure 3.2.

We will use many tools in the Burp Suite for the duration of our hacking approach. For our purposes, we use Burp Suite Intercept (or burp in short) as our proxy, as it is widely regarded as one of the most functional web piracy platforms. Burp Suite works in a graphical interface, as shown in Figure 10.6, and in addition to the standard features we find in each web evaluation product, there are several advanced tools for carrying out deeper attacks. Burp Suite is such a tool that moves to the bottom of the cost scale for the professional version ($275 per year at the time of writing), but still offers a solid range of features.

A large number of commercial web analytics tools are also available, and they range in price from several hundred dollars to thousands of dollars.

Burp suite professional license cost