What is the primary capability of Burp Suite's proxy?

• A. It logs traffic only.
• B. Intercepts and modifies browser requests as they pass between client and server.
• C. It replaces all content with placeholders.
• D. It encrypts all traffic automatically.

Answer: (B)

Burp Suite's proxy sits between your browser and the target, acting as a man-in-the-middle to inspect, intercept, and modify traffic in real time. The key capability is pausing a browser request as it travels to the server, editing elements like parameters, headers, cookies, or payload data, and then forwarding the altered request or replaying it as needed. You can also inspect and tweak responses before they reach the browser, which is essential for testing how the application handles unusual inputs, session management, and input validation. It’s not merely about logging traffic, and it doesn’t automatically replace content with placeholders or encrypt all traffic—the HTTPS interception requires installing Burp’s CA certificate to decrypt and inspect encrypted traffic.