Distinguish an authorized web security test from activity that exceeds the approved scope.

Configure Burp's built-in browser and target scope to capture only authorized HTTPS lab traffic.

Parse a captured HTTP exchange to identify the method, path, parameters, headers, cookies, body, status code, and content type.

Use HTTP history filters to isolate relevant requests and responses.

Modify and replay a captured request with Burp Repeater.

Use Burp Decoder to transform common URL, HTML, and Base64 encodings.

Create a reproducible evidence note from a request-response pair.