## Burp Suite

The de-facto standard for Web App Hacking.

### Key Components
1.  **Dashboard**: Status checks.
2.  **Proxy**: The Interceptor.
    *   **Intercept is On**: Traffic stops until you click Forward.
    *   **HTTP History**: A log of every request sent.
3.  **Repeater**: Manual Testing. (Send -> Modify -> Resend).
4.  **Intruder**: Brute forcing. (Send -> fuzz payload -> Resend 1000 times).
5.  **Decoder**: Base64/URL encoding tool.

### Setup
Burp listens on `127.0.0.1:8080`.
You must configure your browser (Firefox) to send traffic there, or use Burp's built-in Chromium browser.