Gregory, a professional penetration tester working at Sys Security Ltd., is tasked with performing a security test of web applications used in the company. For this purpose, Gregory uses a tool to…

Nmap is a network scanner used for discovering hosts and services on a network, not primarily for web application testing with an intercepting proxy.

Burp Suite is a comprehensive platform for web application security testing, featuring an intercepting proxy that allows testers to inspect and modify HTTP/S traffic between a browser and the target application. It also includes tools for performing customized attacks (like fuzzing with Intruder) and analyzing the cryptographic randomness of session tokens, directly matching the described activities.

CxSAST (Checkmarx Static Application Security Testing) is a tool for static code analysis, identifying vulnerabilities in source code before execution, not for dynamic web traffic manipulation.

Wireshark is a network protocol analyzer for capturing and inspecting network traffic, but it lacks the active attacking and modification capabilities of a web application proxy like Burp Suite.