Proxy and Interception

Burp Suite is an integrated platform for testing the security of web applications. It sits between your browser and the target server as an intercepting proxy, letting you inspect and modify every HTTP/HTTPS request and response.

• Proxy — intercept traffic
• Repeater — manually replay requests
• Intruder — automate fuzzing
• Scanner — find vulnerabilities (Pro)

Burp's Proxy listens on a local port (default 127.0.0.1:8080). Your browser is configured to send all traffic through it, so Burp can pause requests before they reach the server.

This man-in-the-middle position is what makes web testing possible: you see exactly what the application sends, including hidden parameters and headers.