If you have suggestions for new features or improvements to the Burp Spider tool, please feel free to submit an issue or pull request on Github. Once the spider has completed crawling, the discovered URLs will be listed in the 'Site map' tab. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. The Burp Spider plugin will automatically send discovered URLs to the spider for crawling. Burp Suite is an integrated platform for performing security testing of web applications. Start an active scan on a website using Burp Suite. The plugin should now be loaded and ready to use. In Burp Suite, go to the 'Extender' tab and select 'Extensions'.Ĭlick the 'Add' button and select the downloaded JAR file. The plugin will automatically send discovered URLs to the spider for crawling.īurp Suite Pro or Community Edition 2.1.0 or laterĭownload the latest release of the Burp Spider plugin from the Github repository. To use the Burp Spider tool, simply load the plugin into Burp Suite and start an active scan. This tool is useful for performing web application security testing and identifying hidden or undiscovered pages and endpoints on a website. The plugin implements the IScannerCheck interface and uses the sendToSpider method to send the URL to Burp Suite's spider for crawling.

Burp Spider is a Burp Suite plugin that enables users to crawl a website using Burp Suite's built-in spider.

Burp suite professional download free