Getting started with Burp Suite

This section of the chapter will discuss a tool that we have yet to use in this book. The tool that we will be using is a proxy tool that allows us to perform security testing on web applications, and in our case, it will enable us to intercept requests being sent to and from our AWS API targets. This means that Burp Suite will give us full control over requests sent via our web browser, making us able to manipulate calls to and from APIs.

Important note

A proxy is a server or a service that inspects and analyzes traffic before it is sent to our target.

Intercepting calls to and from APIs allows us to see parameters such as tokens, sessions, and other attributes that may be able to be altered to make the API accept calls that it shouldn't. This is a fairly common technique that is used by bug bounty hunters and web application penetration testers. 

Important note

A bug bounty hunter is a freelance penetration tester who works...