Burp Suite
Burp Suite is a macOS web security testing app used to inspect, modify, and assess HTTP and HTTPS traffic for websites and APIs.
What is Burp Suite?
Burp Suite is a desktop security testing application for analyzing and testing web applications and APIs on macOS. It is widely used by penetration testers, security researchers, developers, and students who need to inspect browser traffic, replay requests, and look for common web vulnerabilities during manual testing. PortSwigger publishes Burp Suite in Community and Professional editions, with tools for proxying traffic, mapping an application's content, repeating requests, and performing targeted security checks. Many users run it alongside a browser while developing, debugging, or auditing login flows, sessions, APIs, and input handling. It also supports extensions, which helps advanced users tailor workflows for specific testing tasks. On Mac, it is typically installed as a standard desktop app and used interactively during security review work.
Key features
- Intercept and inspect HTTP and HTTPS traffic between your browser and a target site
- Modify and resend requests to test application behavior and input handling
- Browse and map application content to understand pages, endpoints, and parameters
- Repeat requests manually for debugging, validation, and targeted testing
- Use built-in tools to examine sessions, headers, cookies, and authentication flows
- Extend the app with add-ons to support specialized security testing workflows
Review app leftovers with diCleaner
Inspect caches, support files, containers, and login items before cleaning.
Safety overview
Status: Use with caution
Burp Suite is legitimate security testing software, but it is designed to intercept and alter web traffic. That is normal for its purpose, yet it also means the app can view sensitive data that passes through it, such as cookies, tokens, form entries, and API requests. Use it only for systems you are authorized to test, keep project files and exported data protected, and review any extensions before installing them. Removing the app is generally straightforward, but saved projects, certificates, and custom settings may remain unless you delete them separately.
Recommendation: Keep Burp Suite if you actively perform web development, debugging, or authorized security testing. If you no longer use it, you can remove it along with its support files to free space, but export any saved projects or settings you want to keep first.
Common paths
/Applications/Burp Suite Community Edition.app/Applications/Burp Suite Professional.app
Cache paths
~/Library/Caches/com.install4j.6592-1155-2163-3973.70
Support paths
~/Library/BurpSuite
Preference paths
~/Library/Preferences/com.install4j.6592-1155-2163-3973.70.plist
Share your experience
Be the first to share your experience.