🖥️Interface Overview

Burp Bounty Pro adds a Burp Bounty Pro tab to the main Burp Suite interface. This tab contains several sub-tabs for managing scans, profiles, rules, and settings.

📑 Main Tabs

📊 Dashboard

The Dashboard is your primary view for monitoring scan activity and reviewing results.

Scanner Progress Table:

• Shows active scan tasks with their status (🟢 Running, 🟡 Paused, ✅ Completed, ❌ Failed)

• Displays the profile name, target URL, and progress information

• Real-time updates as scans execute

Issues Table:

• Lists all vulnerabilities and findings detected by Burp Bounty Pro

• Columns: Issue Name, Severity, Confidence, Host, Path

• Click on an issue to view its full details including the payload used and grep match

Control Buttons:

• ⏸️ Pause All — Pauses all running scans using PausableThreadPoolExecutor. Threads block at a safe point and resume exactly where they left off. No scan progress is lost.

• ▶️ Resume All — Resumes all paused scans instantly

• ⏹️ Stop — Stops all scans and clears the task queue

• 🗑️ Clear Issues — Clears the issues table

• 🔄 Live Passive Scan — Toggle button to enable/disable automatic passive scanning of all HTTP traffic. When enabled, the "Scope Only" checkbox restricts scanning to in-scope targets.

🔎 Scanner

The Scanner tab provides detailed per-request logging of scan activity.

• Shows every HTTP request made by active scan profiles

• Includes request/response pairs for debugging and analysis

• Displays the profile name, payload, and result for each request

📝 Profiles

The Profiles tab manages all scanning profiles, organized into three categories:

🎯 Active Profiles:

• Profiles that actively send payloads to test for vulnerabilities

• Columns: Enabled, Profile Name, Tags, Author's Twitter

• Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, Set New Tag, Import, Export

📨 Passive Request Profiles:

• Profiles that analyze HTTP requests passing through Burp Suite

• Columns: Enabled, Profile Name, Tags, Author's Twitter

• Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, Set New Tag, Import, Export

📩 Passive Response Profiles:

• Profiles that analyze HTTP responses received by Burp Suite

• Columns: Enabled, Profile Name, Tags, Author's Twitter

• Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, Set New Tag, Import, Export

📝 Note: All three profile tables now share the same layout with the Tags column and full right-click context menu (Enable, Disable, Set New Tag).

🏷️ Tags Manager:

• View and manage tags used to categorize profiles

• Tags are used in Rules to target groups of profiles

• Tags organize the passive scan context menu into submenus

Common Actions:

• 📥 Import — Load profiles from .bb JSON files

• 📤 Export — Save profiles to .bb JSON files for sharing

• 📋 Duplicate — Clone a profile with auto-generated name suffix

• 🖱️ Double-click — Open the profile editor dialog (non-modal)

• 🏷️ Right-click > Set New Tag — Assign a tag to selected profiles (works on all three tables)

📋 Rules

The Rules tab manages Smart Scan rules that define automated scanning workflows.

• Each rule has: Name, Enabled status, Description

• Rules follow an IF-THEN pattern: IF passive conditions match, THEN execute active profiles

• Actions: Add, Edit, Delete, Duplicate, Enable/Disable, Import, Export

• Rule files use the .bbre extension

⚙️ Options

The Options tab provides global configuration settings:

• ⏱️ Scan Timeout — Maximum time for a scan before marking as failed

• 🌐 Collaborator Refresh — Polling interval for Burp Collaborator results

• 🔢 Max Concurrent Scans — Limit the number of simultaneous scans

• 🚫 Avoid URLs — URL patterns to exclude from scanning

📝 Note: Thread pool size, concurrency, and requests per second are configured per scan in the URL Filter popup that appears before each scan, not in the global Options tab. See Scan Control.

🔀 Variables

The Variables tab manages global variables used in profiles:

• View all configured variables with their current values

• Add, edit, and remove custom variables

• Default variables include {REDIRECT_DOMAIN}, {ATTACKER_DOMAIN}, {XXE_FILE}, and more

• Variables are replaced at runtime in payloads, grep patterns, and raw requests

🔑 License

The License tab shows license status and activation:

• Enter and activate license keys

• View license expiration and status

ℹ️ About

The About tab displays:

• Burp Bounty Pro version (currently v3.0.0)

• Author information

• Links to documentation and support

• 🔄 Check For Updates — Button that checks for new versions of Burp Bounty Pro and new/updated scanning profiles

🖱️ Context Menus

Burp Bounty Pro integrates with Burp Suite's right-click context menus throughout the application.

On HTTP Requests (Proxy, Site Map, Repeater, etc.)

Menu Item	Description
🎯 Active Scan	Launch an active scan with the URL Filter popup
🧠 Smart Scan	Launch a Smart Scan with rule-based automation
👁️ Passive Scan	Launch a passive scan with tag-based submenu

The Passive Scan submenu provides tag-based filtering:

👁️ Passive Scan
├── 🌐 All (N)              ← All passive profiles
├── 📨 Passive Request       ← Request profiles organized by tag
│   ├── All (N)
│   ├── Tag1 (N)
│   └── Tag2 (N)
└── 📩 Passive Response      ← Response profiles organized by tag
    ├── All (N)
    ├── Tag1 (N)
    └── Tag2 (N)

On Profile Table Rows

Menu Item	Description
✅ Enable	Enable the selected profile(s)
❌ Disable	Disable the selected profile(s)
🏷️ Set New Tag	Assign a new tag to the selected profile(s)

Available on all three profile tables (Active, Passive Request, Passive Response).

🔗 URL Filter Popup

The URL Filter popup appears before launching Active and Smart scans:

Section	Description
🔗 URL Table	Select which URLs to include in the scan
🔄 Match and Replace	Request modification rules (add headers, change parameters)
⚡ Scanner Settings	Per-scan Threads, Concurrency, and Requests per second