Burp Suite — Attack Tool

Web security testing toolkit. The scanner is a specific capability, not a synonym for every proxy, repeater or intruder workflow; feature availability depends on edition.

Tool identity and evidence

Editorial ecosystem entry, not an ATT&CK software object in the selected snapshot. Its linked capabilities are deliberately limited to the evidence below.

Aliases: none recorded

Primary tool reference

Existing author guides

Cracking Web Interfaces with Burp Suite: A Comprehensive Tutorial · 2024-10-24
Mastering Burp Suite Vulnerability Scanner · 2024-11-11
Getting More from Burp Suite with LLMs · 2025-11-25
Burp Suite MCP + Gemini CLI · 2026-01-02
AI-Assisted Web and Cloud Penetration Testing with Cursor + MCP HexStrike and Burp Suite MCP. · 2026-01-31

Primary documentation

No reviewed association in this snapshot.

Connected ecosystem references

Linked tags

external-services

curated_tool editorial_capability

Technique-specific simulations and detections

Detection links describe the associated behavior, not independently verified tool-specific signatures.

T1595.002 · Vulnerability Scanning · Detection rules & anomalies

Telemetry context

Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.

Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.