CompTIA CySA+ CS0-003: Burp Suite

Burp is set of tools that are used by hackers to pentest web applications. The burp suite has spider, intruder, repeater, proxy, decoder, sequencer, extender, and a scanner. It is an integrated package that gives users the tools necessary to perform security testing of web applications. It is heavily utilized by the industry and it is pretty much all in one toolset. If you need additional tools, it allows you to use add-ons to expand capabilities as well by using the extender.

The proxy allows you to conduct man in the middle attack, spider allows you to map out the website, intruder allows you to perform automated attacks, repeater lets you manually test applications, sequencer provides entropy checker, decoder helps look for specific data, extender lets you expand capabilities, and scanner automatically looks for common vulnerabilities.