Burp Suite for HTB & CTF Players: Complete Guide (2026)

TL;DR Burp Suite is the industry-standard web proxy for manually testing web applications. Mastering it separates players who guess their way through HTB web challenges from those who dismantle them methodically. This guide covers every feature you'll actually use in CTF contexts — Proxy, Repeater, Intruder, Decoder, Comparer, and the BApp extensions that matter — with no enterprise fluff. Introduction If you've spent any time on HackTheBox or playing CTFs, you've seen Burp Suite mentioned in ev