# Interface Overview

Burp Bounty Pro adds a **Burp Bounty Pro** tab to the main Burp Suite interface. This tab contains several sub-tabs for managing scans, profiles, rules, and settings.

![Burp Bounty Pro main interface](https://710436228-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FK0ure45w5tAMFDkq49ZN%2Fuploads%2Fgit-blob-92c8ae3b23c1583e16d3cee0cc0fae4e586e70aa%2Finterface-main-tabs.png?alt=media)

## 📑 Main Tabs

### 📊 Dashboard

The Dashboard is your primary view for monitoring scan activity and reviewing results.

**Scanner Progress Table:**

* Shows active scan tasks with their status (🟢 Running, 🟡 Paused, ✅ Completed, ❌ Failed)
* Displays the profile name, target URL, and progress information
* Real-time updates as scans execute

**Issues Table:**

* Lists all vulnerabilities and findings detected by Burp Bounty Pro
* Columns: Issue Name, Severity, Confidence, Host, Path
* Click on an issue to view its full details including the payload used and grep match

**Control Buttons:**

* ⏸️ **Pause All** — Pauses all running scans using PausableThreadPoolExecutor. Threads block at a safe point and resume exactly where they left off. No scan progress is lost.
* ▶️ **Resume All** — Resumes all paused scans instantly
* ⏹️ **Stop** — Stops all scans and clears the task queue
* 🗑️ **Clear Issues** — Clears the issues table
* 🔄 **Live Passive Scan** — Toggle button to enable/disable automatic passive scanning of all HTTP traffic. When enabled, the "Scope Only" checkbox restricts scanning to in-scope targets.

### 🔎 Scanners

The Scanners tab is organized into dedicated sub-tabs for each scan type:

#### 🎯 Active

The Active sub-tab provides detailed per-request logging of active scan activity.

* Shows every HTTP request made by active scan profiles
* Includes request/response pairs for debugging and analysis
* Displays the profile name, payload, and result for each request
* Highlights in blue when new scan activity starts from Smart Scan or AI Scanner

#### 👁️ Passive

The Passive sub-tab shows results from passive scanning.

* Lists each passive scan entry with host, method, URL, parameter count, and findings summary
* Tracks matched profiles for each scanned request
* Includes request/response viewers

#### 🧠 Smart

The Smart sub-tab tracks Smart Scan rule evaluations and triggered scans.

* Shows matched rules for each request
* Displays which active profiles were launched and scan count
* Links to the triggered active scans

#### 🤖 AI

The AI sub-tab manages AI Scanner entries and results.

* Results table with status (Analyzing, Complete, Error), findings summary, and parameter count
* Detail panel with request/response viewers and full AI JSON response
* Entry controls: Pause, Resume, Cancel, Remove, Clear
* Settings button for configuring AI provider, API key, model, endpoint, and prompts

See [AI Scanner](https://docs.bountysecurity.ai/scanning/ai-scan) for full documentation.

#### 📡 Live

The Live sub-tab shows real-time passive scan activity from the Live Passive Scan feature.

### 📝 Profiles

The Profiles tab manages all scanning profiles, organized into three categories:

🎯 **Active Profiles:**

* Profiles that actively send payloads to test for vulnerabilities
* Columns: Enabled, Profile Name, **Tags**, Author's Twitter
* Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, Set New Tag, Import, Export

📨 **Passive Request Profiles:**

* Profiles that analyze HTTP requests passing through Burp Suite
* Columns: Enabled, Profile Name, **Tags**, Author's Twitter
* Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, **Set New Tag**, Import, Export

📩 **Passive Response Profiles:**

* Profiles that analyze HTTP responses received by Burp Suite
* Columns: Enabled, Profile Name, **Tags**, Author's Twitter
* Actions: Add, Edit (double-click), Delete, Duplicate, Enable/Disable, **Set New Tag**, Import, Export

> 📝 **Note:** All three profile tables now share the same layout with the Tags column and full right-click context menu (Enable, Disable, Set New Tag).

🏷️ **Tags Manager:**

* View and manage tags used to categorize profiles
* Tags are used in Rules to target groups of profiles
* Tags organize the passive scan context menu into submenus

**Common Actions:**

* 📥 **Import** — Load profiles from `.bb` JSON files
* 📤 **Export** — Save profiles to `.bb` JSON files for sharing
* 📋 **Duplicate** — Clone a profile with auto-generated name suffix
* 🖱️ **Double-click** — Open the profile editor dialog (non-modal)
* 🏷️ **Right-click** > **Set New Tag** — Assign a tag to selected profiles (works on all three tables)

### 📋 Rules

The Rules tab manages Smart Scan rules that define automated scanning workflows.

* Each rule has: Name, Enabled status, Description
* Rules follow an IF-THEN pattern: IF passive conditions match, THEN execute active profiles
* Actions: Add, Edit, Delete, Duplicate, Enable/Disable, Import, Export
* Rule files use the `.bbre` extension

### ⚙️ Options

The Options tab provides global configuration settings:

* ⏱️ **Scan Timeout** — Maximum time for a scan before marking as failed
* 🌐 **Collaborator Refresh** — Polling interval for Burp Collaborator results
* 🔢 **Max Concurrent Scans** — Limit the number of simultaneous scans
* 🚫 **Avoid URLs** — URL patterns to exclude from scanning

> 📝 **Note:** Thread pool size, concurrency, and requests per second are configured **per scan** in the URL Filter popup that appears before each scan, not in the global Options tab. See [Scan Control](https://docs.bountysecurity.ai/scanning/scan-control).

### 🔀 Variables

The Variables tab manages global variables used in profiles:

* View all configured variables with their current values
* Add, edit, and remove custom variables
* Default variables include `{REDIRECT_DOMAIN}`, `{ATTACKER_DOMAIN}`, `{XXE_FILE}`, and more
* Variables are replaced at runtime in payloads, grep patterns, and raw requests

### 🔑 License

The License tab shows license status and activation:

* Enter and activate license keys
* View license expiration and status

### ℹ️ About

The About tab displays:

* Burp Bounty Pro version (currently v3.1.0)
* Author information
* Links to documentation and support
* 🔄 **Check For Updates** — Button that checks for new versions of Burp Bounty Pro and new/updated scanning profiles

## 🖱️ Context Menus

Burp Bounty Pro integrates with Burp Suite's right-click context menus throughout the application.

### On HTTP Requests (Proxy, Site Map, Repeater, etc.)

| Menu Item            | Description                                     |
| -------------------- | ----------------------------------------------- |
| 🎯 **Active Scan**   | Launch an active scan with the URL Filter popup |
| 🧠 **Smart Scan**    | Launch a Smart Scan with rule-based automation  |
| 👁️ **Passive Scan** | Launch a passive scan with tag-based submenu    |
| 🤖 **AI Scanner**    | Launch AI-powered analysis with auto-scan       |

The **Passive Scan** submenu provides tag-based filtering:

```
👁️ Passive Scan
├── 🌐 All (N)              ← All passive profiles
├── 📨 Passive Request       ← Request profiles organized by tag
│   ├── All (N)
│   ├── Tag1 (N)
│   └── Tag2 (N)
└── 📩 Passive Response      ← Response profiles organized by tag
    ├── All (N)
    ├── Tag1 (N)
    └── Tag2 (N)
```

### On Profile Table Rows

| Menu Item           | Description                                 |
| ------------------- | ------------------------------------------- |
| ✅ **Enable**        | Enable the selected profile(s)              |
| ❌ **Disable**       | Disable the selected profile(s)             |
| 🏷️ **Set New Tag** | Assign a new tag to the selected profile(s) |

Available on all three profile tables (Active, Passive Request, Passive Response).

## 🔗 URL Filter Popup

The URL Filter popup appears before launching Active, Smart, Passive, and AI scans:

| Section                  | Description                                                      |
| ------------------------ | ---------------------------------------------------------------- |
| 🔗 **URL Table**         | Select which URLs to include in the scan                         |
| 🔄 **Match and Replace** | Request modification rules (add headers, change parameters)      |
| ⚡ **Scanner Settings**   | Per-scan performance settings (context-aware based on scan type) |

The Scanner Settings section adapts based on the scan type:

| Scan Type            | Available Settings                                                 |
| -------------------- | ------------------------------------------------------------------ |
| 🎯 **Active Scan**   | Threads, Active Concurrency, Requests/sec                          |
| 🧠 **Smart Scan**    | Threads, Passive Concurrency, Active Concurrency, Requests/sec     |
| 👁️ **Passive Scan** | Threads, Passive Concurrency                                       |
| 🤖 **AI Scanner**    | Threads, AI Analysis Concurrency, Active Concurrency, Requests/sec |