That's it Burp Suite it has many features that can help one penetration tester or ethical hacker. Two most commonly used applications in this tool are the 'Burp Suite Spider', which can list and record various pages and parameters of a web page by examining cookies and initiates connections with web applications, and 'Intruder' which performs automated attacks on web applications.
Burp Suite is an excellent web hacking tool used by many pentesters to check for website and web application vulnerabilities.
Burp Suite works with detailed knowledge of the implementation of an HTTP protocol. This tool works through an algorithm that can be configured by settings and can generate malicious requests attacks HTTP used by a hacker.
The Burp Suite is especially useful for discovering vulnerabilities such as SQL injections and cross-site scripting.
portswigger.net/burp/download.html