Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to tes

Nmap is a network discovery and port scanning tool, not a web application testing tool with proxy or session token analysis capabilities.

Burp Suite is a comprehensive web application security testing platform that includes an intercepting proxy for inspecting and modifying HTTP/HTTPS traffic between a browser and target application. It also provides Intruder for customized automated attacks and Sequencer for analyzing the randomness of session tokens, matching every capability described in the scenario.

CxSAST (Checkmarx SAST) is a static application security testing tool that analyzes source code for vulnerabilities, not an active proxy-based penetration testing tool.

Wireshark is a passive network packet capture and protocol analysis tool that does not support traffic interception, modification, or session token testing.