Federico Dotta

@[email protected]

[Federico Dotta @apps3c]

To wrap up @Burp_Suite Extensibility Month initiatives, I just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance.

More details:
https://t.co/mit8dYKc67

[Federico Dotta @apps3c]

As part of @Burp_Suite Extensibility Month initiatives, last week I gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.

Video, slides and code can be found here:
https://t.co/DEqvBo5V8J

[Burp Suite @Burp_Suite]

🚀 Want to build your own Burp Suite extensions?

As part of Burp Extensibility Month, we’re sharing Burp Ambassador Federico Dotta's (@apps3c) 10-part guide to extending Burp Suite with the Montoya API.

Start here 👇
https://t.co/mWaIl5YEqv

#BurpSuite #BurpExtensibility

[Federico Dotta @apps3c]

I’ll be hosting a live session during @Burp_Suite Extensibility Month on the @PortSwigger Discord on May 14 at 4 PM BST / 5 PM CEST. Topic: “Restoring Testability: Handling Complex Scenarios in Burp Suite with a Custom Extension”. Join us live!

https://t.co/IkWyvmMMQ2

[Federico Dotta @apps3c]

To celebrate the @Burp_Suite Extensibility Month, the tenth article of the series "Extending Burp Suite for fun and profit - The Montoya way" is out! The topics of this tenth part is "Burp AI"!

Stay tuned for a new extension on the topic on @BApp_Store!

https://t.co/BwMuePkrSu

[Burp Suite @Burp_Suite]

Highlights include:

✨ Our new Burp Ambassadors, @apps3c and @0xTib3rius, present sessions covering creating custom extensions for complex testing scenarios and a Bambda generation framework.

🔬 A deep dive with PortSwigger researcher @zakfedotkin on vibecoding Burp extensions.

[Burp Suite @Burp_Suite]

🚀 Extensibility Month is launching on the PortSwigger Discord!

Join us for a month of events, resources, and community discussion all about creating, sharing, and getting more from Extensibility in Burp Suite.

#BurpSuite #BurpExtensibility

[PortSwigger @PortSwigger]

Meet the Burp Ambassadors: @apps3c 🇮🇹

Federico Dotta is an offensive security researcher with a deep focus on Burp Suite extensibility.

#BurpAmbassador #BurpSuite #BurpExtensibility #BApps

[Federico Dotta @apps3c]

The ninth article of the series "Extending Burp Suite for fun and profit - The Montoya way" is out! The topics of this ninth part is "Custom scan checks - An improved quick way to extend Burp Suite Active and Passive Scanner"!

https://t.co/hPONObgjiz

[BApp Store @BApp_Store]

🔄 Brida, Burp to Frida Bridge

A bridge between Burp Suite and Frida to help test Android applications.

👇
https://t.co/lDFt6tbt43

[Federico Dotta @apps3c]

I released an updated version of Brida (0.6), fully compatible with @fridadotre >= 17! You can download the new release from GitHub and soon from the @Burp_Suite BAppStore.

https://t.co/OHXuYMkhNu

[Federico Dotta @apps3c]

A few notes and examples on a topic I've been exploring recently: AI red teaming on LLM-based applications!

https://t.co/XacjWF0bAu

[HN Security @hnsec]

The unattainable unicorn in fault injection!

Our latest article reveals that single-bit faults are possible on ESP32. Discover how some bits are easier to flip and why lowest voltage isn't always best.

Join @0x696e6f6465 in his #hardwarehacking quest.

https://t.co/ngnctBv6ys

[Federico Dotta @apps3c]

Eighth article of the series "Extending @Burp_Suite for fun and profit - The Montoya way" is out! Topic: BChecks - A quick way to extend Burp Suite Active and Passive Scanner!
https://t.co/p6SWwo0x5S

[Federico Dotta @apps3c]

Seventh article of the series "Extending
@Burp_Suite
for fun and profit - The Montoya way" is out! Topic: using the Collaborator in Burp Suite plugins!
https://t.co/Lw52zupNNU

[Federico Dotta @apps3c]

Great article on fault injection by my colleague @0x696e6f6465. Definitively worth a read!
https://t.co/loFtGCYip5

[James Kettle @albinowax]

Display responses that came from a server-side cache (Varnish/Cloudfront) with this filter bambda:

return requestResponse.response().headerValue("X-Cache").toLowerCase().contains("hit");

[Federico Dotta @apps3c]

Sixth article of the series "Extending @Burp_Suite for fun and profit - The Montoya way" is out! Topic: adding new checks to Burp Suite Active and Passive Scanner!
https://t.co/GevlR4nP6n

[bugcrowd @Bugcrowd]

@InsiderPhD 4. Brida, Burp to Frida bridge

Bridges Burp and Frida, enabling traffic manipulation across multiple platforms. Simplifies mobile testing with direct function usage for data encryption/decryption, offering custom plugins, tabs, menu options and more.

https://t.co/Mk2PMjG6Tt

[Federico Dotta @apps3c]

Fifth article of the series "Extending @Burp_Suite for fun and profit - The Montoya way" is out! Topic: adding new functionalities to the context menu!
https://t.co/ibkcL0T1Qr