contents.md

Burp Suite 中文文档 - 目录

---

• 简介
• 文档目录
• 文档主页
• 桌面版本
  • 开始入门
    • 启动 Burp
    • 启动向导
      • 选择工程
      • 选择配置
      • 打开由其他版本创建的工程
    • 显示设置
    • 了解更多
    • 命令行
      • 命令行参数
    • Burp 工程
      • 工程文件
        • 保存工程的副本
        • 保存协作工程标识符
        • 导入工程
    • 配置
      • 配置库
      • 用户及工程配置文件
      • 读取和保存配置文件
      • 配置文件格式
  • 扫描Web网站
    • 启动扫描
      • 配置扫描
    • 监控扫描活动
    • 扫描报告
    • 扫描启动器
      • 扫描细节
      • 配置扫描
      • 应用登陆配置
      • 资源池配置
    • 实时扫描
      • 实时扫描配置
      • 实时审计
      • 实时被动抓取
    • 抓取选项
      • 抓取优化
        • 最大链接深度
        • 抓取策略
      • 抓取限制
      • 登陆功能
      • 在抓取时处理错误
    • 审计选项
      • 优化审计
      • 问题报告
      • 审计期间处理应用程序错误
      • 插入点类型
      • 修改参数位置选项
      • 忽略插入点
      • 频繁发生的插入点
      • 其他的插入点设置
      • JavaScript分析选项
    • 审计项目查看
      • 审计项目注解
    • 报告结果
      • 报告格式
      • 问题详情
      • HTTP 消息
      • 选择问题类型
      • 报告详情
  • 渗透测试
    • 使用Burp的基础知识
    • 测试工作流
    • 侦查和分析
    • 工具配置
    • 漏洞检测和利用
    • 了解更多
    • 配置你的浏览器
  • 移动端测试
  • Extensibility
  • Troubleshooting
  • Dashboard
    • Task Details
    • Task Execution Settings
      • Task auto-start
      • Resource pools
    • Issue Activity
      • Issue activity annotations
  • Tools
    • Target
      • Using
        • Manual Application Mapping
        • Defining Target Scope
        • Reviewing Unrequested Items
        • Discovering Hidden Content
        • Analyzing The Attack Surface
        • Target tool testing workflow
      • Target Site Map
        • Target Information
          • Site Map Views
          • Contents View
          • Issues View
        • Site map display filter
        • Site map annotations
        • Site map testing workflow
        • Comparing Site Maps
          • Site Map Sources
          • Request Matching
          • Response Comparison
          • Comparison Results
      • Scope
    • Proxy
      • Getting Started
      • Using Burp Proxy
        • Getting Set Up
        • Intercepting Requests and Responses
        • Using the Proxy History
        • Burp Proxy testing workflow
        • Key Configuration Options
      • Intercepting Messages
        • Controls
        • Message Display
      • History
        • History Table
        • Proxy history display filter
        • Proxy history annotations
        • Proxy history testing workflow
      • Options
        • Proxy Listeners
          • Binding
          • Request Handling
          • Certificate
          • Exporting and Importing the CA Certificate
          • Creating a Custom CA Certificate
        • Intercepting HTTP Requests and Responses
        • Intercepting WebSockets Messages
        • Response Modification
        • Match and Replace
        • SSL Pass Through
        • Miscellaneous
        • Invisible Proxying
        • Install CA Certificate
      • In-Browser Controls
    • Intruder
      • Getting Started
      • Using Burp Intruder
        • How Intruder Works
        • Typical Uses
          • Enumerating Identifiers
          • Harvesting Useful Data
          • Fuzzing For Vulnerabilities
        • Configuring an Attack
        • Launching an Attack
      • Target
      • Positions
        • Request Template
        • Payload Markers
        • Attack Type
      • Payloads
        • Types
          • Simple List
            • Predefined Payload Lists
          • Runtime File
          • Custom Iterator
          • Character Substitution
          • Case Modification
          • Recursive Grep
          • Illegal Unicode
          • Character Blocks
          • Numbers
          • Dates
          • Brute Forcer
          • Null Payloads
          • Character Frobber
          • Bit Flipper
          • Username Generator
          • ECB Block Shuffler
          • Extension-Generated
          • Copy Other Payload
        • Processing
          • Payload Processing Rules
          • Payload Encoding
      • Options
        • Attack request headers
        • Request Engine
        • Attack results options
        • Grep - Match
        • Grep - Extract
        • Grep - Payloads
        • Handling redirections during attacks
      • Attacks
        • Attack results
          • Results Table
          • Intruder attacks display filter
          • Annotations
          • Burp Intruder testing workflow
        • Attack Configuration Tabs
        • Results Menus
          • Attack Menu
          • Save Menu
          • Columns Menu
    • Repeater
      • Using Burp Repeater
        • Issuing Requests
        • Request History
        • Repeater Options
        • Managing Request Tabs
      • Options
    • Sequencer
      • Getting Started
      • Randomness Tests
        • Character-Level Analysis
        • Bit-Level Analysis
      • Samples
        • Live Capture
          • Select Live Capture Request
          • Token Location Within Response
          • Live Capture Options
          • Running the Live Capture
        • Manual Load
      • Analysis Options
        • Token Handling
        • Token Analysis
      • Results
        • Summary
        • Character-level Analysis results
        • Bit-level Analysis results
        • Results analysis Options
    • Decoder
      • Loading data into Decoder
      • Transformations
      • Working Manually
      • Smart Decoding
    • Comparer
      • Loading data into Comparer
      • Performing Comparisons
    • Extender
      • Loading and Managing Extensions
      • Extension Details
      • BApp Store
      • Burp Extender API
      • Extender options
        • Settings
        • Java Environment
        • Python Environment
        • Ruby Environment
    • Clickbandit
      • Running Burp Clickbandit
      • Record Mode
      • Review Mode
    • Collaborator Client
    • Mobile Assistant
      • Routing Traffic Through Burp Suite
      • Bypassing Certificate Pinning
        • Adding Injected Apps
        • Injected Apps List
        • Recovering From Crashes
      • Installing Burp Suite Mobile Assistant
  • Useful Functions
    • Message Editor
      • Message Analysis Tabs
        • Raw
        • Params
        • Headers
        • Hex
        • md
        • XML
        • Render
        • ViewState
      • Context Menu Commands
      • Text Editor
        • Syntax Analysis
        • Text editor hotkeys
        • Quick search
    • Search
      • Text search
      • Find Comments and Scripts
      • Find References
    • Target Analyzer
    • Content Discovery
      • Control
      • Target
      • Filenames
      • File Extensions
      • Discovery Engine
      • Site Map
    • Task Scheduler
    • Generate CSRF PoC
      • CSRF PoC options
    • URL-Matching Rules
      • Normal Scope Control
      • Advanced Scope Control
    • Response Extraction Rules
    • Manual Testing Simulator
  • Options
    • Connections
      • Platform Authentication
      • Upstream Proxy Servers
      • SOCKS Proxy
      • Timeouts
      • Hostname Resolution
      • Out-of-Scope Requests
    • HTTP
      • Redirections
      • Streaming Responses
      • Status 100 Responses
    • SSL
      • SSL Negotiation
      • Java SSL Options
      • Client SSL Certificates
      • Server SSL Certificates
    • Sessions
      • Session Handling Challenges
      • Session Handling Rules
        • Session Handling Tracer
      • Cookie Jar
      • Macros
      • Integration With Burp Tools
      • Rule Editor
        • Rule Description
        • Rule Actions
          • Use Cookies From the Session Handling Cookie Jar
          • Set a Specific Cookie or Parameter Value
          • Check Session Is Valid
          • Prompt For In-Browser Session Recovery
          • Run a Macro
          • Run a Post-Request Macro
          • Invoke a Burp Extension
        • Tools Scope
        • URL Scope
        • Parameter Scope
      • Macro Editor
        • Record Macro
        • Configuring Macro Items
          • Cookie Handling
          • Parameter Handling
          • Custom Parameter Locations In Response
        • Re-Analyze Macro
        • Test Macro
    • Misc Project Options
      • Scheduled Tasks
      • Burp Collaborator Server
      • Logging
    • Display
      • User Interface
      • HTTP Message Display
      • Character Sets
      • HTML Rendering
    • Misc User Options
      • Hotkeys
      • Automatic Project Backup
      • REST API options
      • Proxy Interception
      • Proxy History Logging
      • Temporary Files Location
      • Performance Feedback
• Scanner
  • Crawling
    • Core Approach
    • Session Handling
    • Detecting Changes in Application State
    • Application Login
    • Crawling Volatile Content
  • Auditing
    • Audit Phases
    • Issue Types
    • Insertion Points
      • Encoding Data Within Insertion Points
      • Nested Insertion Points
      • Modifying Parameter Locations
    • Automatic Session Handling
    • Avoiding Duplication
      • Consolidation of frequently occurring passive issues
      • Handling of frequently occurring insertion points
    • JavaScript Analysis
    • Handling application errors
• Burp Collaborator
  • What Is Burp Collaborator?
  • How Burp Collaborator Works
  • Security of Collaborator Data
  • Options for Using Burp Collaborator
  • Deploying a Private Server
    • Installation And Execution
    • Basic Set-up On A Closed Network
    • Running On Non-Standard Ports
    • DNS Configuration
    • SSL Configuration
    • Interaction Events and Polling
    • Metrics
    • Collaborator logging
    • Testing the Installation
    • Collaborator configuration File Format
• Burp Infiltrator
  • How Burp Infiltrator Works
  • Installing Burp Infiltrator
    • Non-interactive Installation
  • Configuration Options