Burp Suite

What differentiates Burp Suite from other similar products?

there are no other tools that can perform as well as burpsuite, charlsproxy and fiddler and other tools are not as capable. fiddler is okay for intercepting the desktop based application which currently burp is not able to do but I simply forward the traffic from fiddler to burp as burp is just better at everything.

What is your favorite aspect of this product?

Everything! its a very good tool with all the necessary requirement for appsec.

What do you dislike most about this product?

it needs support for non http based protocol interception as there is no tool to do this properly

What recommendations would you give to someone considering this product?

go for the tool and also the brupsuite academy, as it will teach how to use the tool and most common attack tactics.

What differentiates Burp Suite from other similar products?

I think what makes Burp Suite different is how everything is available in one place and easy to work with. It lets me see and change requests directly which really helps in understanding things better. Overall it just feels more flexible and powerful compared to other tools like Owasp zap

What is your favorite aspect of this product?

My favorite thing about this product is how everything is available in one place. It makes testing and analyzing web requests really easy and saves a lot of time. I also like that it works well for both beginners and experienced users, so it feels very practical to use as well as I liked the CSRF payload generation feature.

What do you dislike most about this product?

One thing I do not like is that the spider feature is removed so it is harder to explore the website automatically. Also some extensions do not work properly and can feel unreliable which makes the testing process a bit frustrating sometimes.

What recommendations would you give to someone considering this product?

I would recommend starting with the basic features first and taking time to learn the tool step by step. It is very powerful but can feel confusing in the beginning. Also try using reliable extensions and do not depend too much on automation, manual testing gives better results.

What differentiates Burp Suite from other similar products?

If I compare Burp Suite with OWASP ZAP, I would say Burp Suite is more powerful and mostly used by professionals for detailed manual testing. OWASP ZAP is easier to use and better for beginners because it focuses more on automated scanning and is free. Burp Suite is advanced, OWASP ZAP is beginner friendly.

What is your favorite aspect of this product?

My favorite aspect of this product is its all in one functionality and ease of use. It allows me to perform both manual and automated testing in a single platform, which saves time and makes the testing process more efficient and effective.

What do you dislike most about this product?

One thing I dislike about this product is that the spider feature has been removed. Which makes it a bit harder to quickly crawl and map web applications. It was a useful feature for beginners as well as experienced person also,

What recommendations would you give to someone considering this product?

I would recommend that the product team consider bringing back the spider feature, as it was very useful for quickly crawling and understanding web applications. It would also be helpful to increase the AI credits limit, so users can make better use of the AI features without restrictions. Overall, improving these areas would make the tool more efficient and user friendly.