Tom Shelton-Lefley

Software engineer working on @Burp_Suite.

Ramblings, anecdotes, and cynical views are my own.

[PortSwigger @PortSwigger]

Introducing the official Burp Ambassador Program! 🧡

@0xTib3rius @rana__khalil @apps3c @hAPI_hacker @soyel_mago

#BurpAmbassador #BurpSuite

[Tom Shelton-Lefley @TomLefley]

Live now on the Early Adopter release channel!

https://t.co/jws87f84hN

[Tom Shelton-Lefley @TomLefley]

In the next version of @Burp_Suite, sharing findings with your teammates is as simple as sending them a link to open!

[Tom Shelton-Lefley @TomLefley]

Got any ideas for future enhancements? Let me know!

https://t.co/eFFxlFNH37

[Burp Suite @Burp_Suite]

Nobody likes writing reports. Let me show you how to go from issue to report in seconds with Burp AI + ReportLM.

Less time reporting, more time hacking.

[Tom Shelton-Lefley @TomLefley]

@adityatelange @Burp_Suite I'll pass it on to the team!

[Tom Shelton-Lefley @TomLefley]

In the next version of @Burp_Suite, sharing findings with your teammates is as simple as sending them a link to open!

[Aaron Boodman @aboodman]

In honor of @jarredsumner, everyone should do a "In the next version of $product" post today.

Show me what's coming for your product in the simplest writing possible.

[Tom Shelton-Lefley @TomLefley]

@NickBlow They've clearly never played Stardew Valley with you ...

[Tom Shelton-Lefley @TomLefley]

You would not believe your eyes, there's 10 million lab solve tries 🎶

[Web Security Academy @WebSecAcademy]

🚀 Big milestone: over 10 mil labs have been launched on the Academy in the past year!

That’s 10,000,000 opportunities to learn, hack, and level up.

Here’s to pushing the boundaries of application security together!

#WebSecurityAcademy #PortSwigger #BurpSuite

[Tom Shelton-Lefley @TomLefley]

... or does it have to be verbal?

[Tom Shelton-Lefley @TomLefley]

For the purpose of vampires, would crouching slightly and patting your thighs constitute inviting them in?

[Tom Shelton-Lefley @TomLefley]

@nickblowtech Hey, a CD player was enough for Buck Rogers

[Tom Shelton-Lefley @TomLefley]

@Burp_Suite Tempted by the chance to win a t-shirt but unsure how it'll look if you wear one and then casually toss a second, identical t-shirt over your shoulder?

Wonder no more!

[DEV Community @ThePracticalDev]

🫠 #MemeMonday #DevCareers #JobSearch

[Tom Shelton-Lefley @TomLefley]

@irsdl @Burp_Suite @albinowax Around 80 credits. The approach I demoed in the example sends all of the issues in one exchange. The production version of the BApp has two additional modes that will split the issues or the issue data over multiple exchanges - this increases report detail but does affect cost.

[Tom Shelton-Lefley @TomLefley]

@Burp_Suite @tom_sl (they mean @TomLefley)

[Burp Suite @Burp_Suite]

Have a great idea for how to leverage the power of Burp AI in an extension? Tom from the PortSwigger development team shows you just how easy it is to build AI features using the Montoya API! 🤖

https://t.co/VVs5hBXF1q

[Burp Suite @Burp_Suite]

Another new AI-powered BApp just launched - ReportLM from our own @TomLefley 🚀

Transform issues into comprehensive, customized reports using the capabilities of Burp AI!

#BurpAI #Extensibility

[Tom Shelton-Lefley @TomLefley]

@Burp_Suite The living room scene turned out so, so much more intimate than it felt whilst filming ...

[Tom Shelton-Lefley @TomLefley]

I'm not sure if Elon still has a strop if you do this but ... ahem ... https://t.co/o5g1GzFCMS

[Tom Shelton-Lefley @TomLefley]

@MasteringBurp With the addition of 'API scanning', we found there was confusion around which scans would scan API calls, and which wouldn't (they all do, it's the discovery that differs).

We're hoping that this clears that up, leading to the right types being used, leading to more bugs found!

[Tom Shelton-Lefley @TomLefley]

@Juniper80763058 @Burp_Suite We added new icons too 🙂