Adam Piper

I'm a programmer, interested in Haskell and TypeScript, reminiscing about snowboarding in Japan. I work at @PortSwigger on web security stuff.

[Adam Piper @bitwog]

@Hyperoptic @Hyperoptic your 12 hour SLA has been violated multiple times with delays over days. The best you've done so far is a single reply to multiple emails over the course of days. And even that one took 2 days, 16 hours, 42 minutes.

Why are you so bad at this?

[Adam Piper @bitwog]

@Hyperoptic for over a week now I've been experiencing drop-outs on my internet connection and and for 6 days I've been largely ignored by your support team. You used to have excellent competent staff and now it's a frustrating mess to deal with you.

[JS0N Haddix @Jhaddix]

Battle of the PROXIES!!!

@Burp_Suite @CaidoIO

[James Kettle @albinowax]

At #BlackHat? Catch "HTTP/1.1 Must Die! The Desync Endgame" today at 3:20 in Oceanside A, Level 2. Hope to see you there!

[Soroush Dalili @irsdl]

I asked ChatGPT to give me a #BurpSuite Bambda Custom Action to update cookies in Repeater based on the response so I don't need to do it manually when my token/ticket is being renewed.

It works well:
https://t.co/WXEuQgtdLw

[LiveOverflow 🔴 @LiveOverflow]

Bug Report @TwitterSupport:
I try to close Twitter by clicking on the X button, but nothing happens. Please fix.

[Shit User Story @ShitUserStory]

As a…
– Twitter user
I want…
– unlimited interactivity – centered in audio, video, messaging, payments/banking – creating a global marketplace for ideas, goods, services, and opportunities.
so that…
– It’s no longer possible to even parody this fucking shitshow.

[Gareth Heyes \u2028 @garethheyes]

How I Implemented Tic Tac Toe with 170mb of HTML - no JS or CSS

https://t.co/OIdpF57Ql9

[Phil Freeman @paf31]

PureScript will be 10 years old in a few months https://t.co/o0AdHevDiW
I made a cake with dalle but it ended up looking like a giant marshmallow

[PortSwigger Research @PortSwiggerRes]

curl has a little-known quirk that exposed both Google Chrome and our own @Burp_Suite. We've published the full details here:
https://t.co/5yjZRMvQsS

[Armando Iannucci @Aiannucci]

Lest we need reminding, here’s a cutting from The Daily Mail in 1938.

[Adam Piper @bitwog]

@WebSecAcademy For the record I take my job very seriously

[Web Security Academy @WebSecAcademy]

We've chosen the medium of dinosaurs to share the engineering team's approach to continuous deployment. #cd #roar 🦖 https://t.co/UmJqbScsDT

[Web Security Academy @WebSecAcademy]

Our Academy developers take deleting Carlos very seriously... Share your Academy devotion snaps using #deletecarlos - the best ones will win some exclusive swag!

[Burp Suite @Burp_Suite]

Introducing the brand new flavour of Burp Suite - completely free, and available for a CI/CD pipeline near you … #cicd #dast https://t.co/DUeeXWTe9P

[Joseph Thacker @rez0__]

The latest talk by @albinowax made me think of this meme. When you think about prior work + burp, it couldn't be more true

[Adam Piper @bitwog]

@alehresmann @WebSecAcademy @PortSwigger We don't have a blog post but if you email me I'll be happy to give you an overview and answer any questions you have :)

[Adam Piper @bitwog]

@JLLeitschuh @streetsofboston @PortSwigger And rather than `.normalize()` we could go even further to make sure that a traversal can't pivot via symlinks by using `.toRealPath()` - but that does IO

[Adam Piper @bitwog]

@JLLeitschuh @streetsofboston @PortSwigger I prefer `Path.of(BASE_DIRECTORY, userInput).normalize().startsWith(BASE_DIRECTORY)` - it's prettier sticking to a single type imho (excluding String and boolean!)

[Burp Suite @Burp_Suite]

If you'd like to try DOM Invader out (on our Early Adopter channel) with a real CSPP vulnerability, we've hidden one in our Gin & Juice Shop; see if you can exploit it! #CSPP https://t.co/nImkEFp7wP