# Export burp certificate
Proxy -> Options -> Import/export CA certificate
# Import in firefox
Open Settings
Search cetficate
View Certificates
Import
Select certificate
Ok
Scopes
# Add the target to scope
Target -> Scope -> Add -> Yes
Scans
Dashboard -> New Scan
# Scan Configuration
Use a custom configuration -> Select from library
Select Never stop audit due to application errors
Select Never stop crawl due to application errors
Burp Extensions
# Must Have
Active Scan++
Backslash Powered Scanner
Param Miner
Taborator
# Nice to Have
Turbo Intruder
Autorize
Software Vulnerability Scanner
Collaborator Everywhere
# Honorable Mentions
Freddy, deserialization scanner
GraphQL raider
JSON Web Tokens
NTLM Challenge Decoder
Retire.js
Additional Scanner Checks