📥Installation
📋 Prerequisites
Before installing Burp Bounty Pro, ensure you have the following:
✅ Burp Suite Professional installed on your system (Community Edition has limited scanning capabilities)
✅ Java Runtime Environment (JRE) version 14 or above
🔧 Installation Steps
1️⃣ Download the Extension
Obtain the latest version of Burp Bounty Pro from the official website at bountysecurity.ai or from your purchase confirmation email.
2️⃣ Launch Burp Suite
Open Burp Suite Professional.
3️⃣ Add the Extension
Navigate to the Extensions tab (formerly called "Extender")
Click on the Installed sub-tab
Click the Add button
4️⃣ Configure the Extension
In the dialog that appears:
Select Java as the extension type
Click Select file... and choose the
BurpBountyPro.jarfile you downloadedClick Next to proceed with the installation
5️⃣ Verify Installation
Ensure that:
✅ The extension is listed in the Installed extensions list with the checkbox ticked
✅ No errors appear in the extension output panel
✅ The Burp Bounty Pro tab appears in the main Burp Suite tab bar
6️⃣ Start Using Burp Bounty Pro
Access the newly added Burp Bounty Pro tab in the Burp Suite interface. You're ready to begin configuring your profiles and start your security testing! 🎉
🚀 First Launch
When Burp Bounty Pro loads for the first time, it will:
📦 Auto-load default profiles — 254 pre-configured scanning profiles are loaded from the bundled
BurpBountyDatadirectory📋 Auto-load default rules — 27 Smart Scan rules are loaded for automated vulnerability detection
🔀 Initialize default variables — Global variables like
{REDIRECT_DOMAIN}are set to their default values
A new Burp Bounty Pro tab will appear in the main Burp Suite interface with sub-tabs for Dashboard, Scanner, Profiles, Rules, Options, Variables, License, and About.
🔑 License Activation
Navigate to the Burp Bounty Pro tab
Click the License sub-tab
Enter your license key
Click Activate
✅ Verifying Installation
After installation, verify that:
✅ The Burp Bounty Pro tab appears in the main Burp Suite window
✅ The Dashboard sub-tab shows the scan control buttons (Pause All, Resume All, Stop, Clear Issues)
✅ The Profiles sub-tab lists loaded profiles across all three tables:
🎯 Active Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
📨 Passive Request Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
📩 Passive Response Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
✅ The Rules sub-tab shows the 27 default rules
📌 Post-Installation
After installing Burp Bounty Pro, you may want to:
📦 Review Default Profiles — Familiarize yourself with the 254 default profiles provided and adjust them to fit your testing needs. Use the tag dropdown to browse by category (XSS, SQLi, CVEs, etc.)
🚀 Explore the Quick Start — Follow the Quick Start guide to run your first scan in under 5 minutes
🔀 Configure Variables — Set your
{REDIRECT_DOMAIN}and{ATTACKER_DOMAIN}in the Variables tab🔄 Check for Updates — Check for updates regularly to ensure you have the latest features and fixes
🔄 Updating
Burp Bounty Pro has a built-in update checker that detects new versions of both the extension and the profiles.
Check For Updates
Go to the Burp Bounty Pro tab > About sub-tab
Click the Check For Updates button
The extension will check for:
🆕 New versions of Burp Bounty Pro — If a new version is available, you'll be notified and can download it
📦 New versions of the profiles — Updated and new scanning profiles are downloaded and installed automatically
💡 Tip: Check for updates regularly to get the latest vulnerability detection profiles and bug fixes.
📝 Note: Your existing profiles, rules, and settings are preserved across updates.
🔗 Resources
📖 Documentation
🎥 Video Tutorials
🌐 Main Website
📧 Support
❓ Need Help?
If you encounter any issues during the installation or have questions about using Burp Bounty Pro, please:
📖 Check the FAQ for common solutions
📧 Contact our support team at [email protected]
Last updated