Completing the exam without Burp?

Burp is great for the repeater and the proxy, unfortunately have been years since they removed the spider and crawler. Usually, I use dirb/dirbuster or ZAP for this task and Burp for manual exploitation.
As usually, you need to adapt and try to use the tools you have. I don’t see the point to buy a burp license unless you work in web security or as a bug hunter.

4 Likes