BurpSuite.guide

Your guide to all things Burp Suite!
Subscribe to my newsletter:

[BurpSuite.guide @BurpSuiteGuide]

What's happening in the Burp-verse - Issue #13 📰 is out!
#burpsuite #newsletter

https://t.co/g8Q4j0x1In

[BApp Store @BApp_Store]

Updated: Active Scan++

https://t.co/HgSSYkiN0w

[BApp Store @BApp_Store]

Updated: Nuclei Burp Integration

https://t.co/qbX3rLxjLY

[Burp Suite @Burp_Suite]

Introducing the brand new flavour of Burp Suite - completely free, and available for a CI/CD pipeline near you … #cicd #dast https://t.co/DUeeXWTe9P

[PortSwigger Research @PortSwiggerRes]

HTTP/3 connection contamination: an upcoming threat - by @albinowax

https://t.co/q3XEr8C64e

[Silent Signal @SilentSignalHU]

We released a @Burp_Suite extension to scan for CVE-2022-42889, aka. Text4Shell:

https://t.co/GQxnBvGg6l

[Mastering Burp Suite Pro @MasteringBurp]

That's what an expert user looks like! 🧠
Intruder + Hackvertor + Stepper, by @irsdl https://t.co/j7fQl167Z5

[Burp Suite @Burp_Suite]

Burp Suite 2022.9.1 released to the Early Adopter channel. Includes an upgrade to Burp's browser and various bug fixes.

https://t.co/pni0IuOG7g

[James Kettle @albinowax]

Last week I published a number of novel CL.0 desync techniques, alongside advice on tuning your research to outwit the competition.

Next week, a way to turn a 'medium' severity flaw into a crit with a $12k case study. And no it's not XSS :)

https://t.co/S51X5RgKGL

[James Kettle @albinowax]

Hope you enjoyed the talk, thanks for coming! Always a pleasure to present to a @defcon crowd. Time for a couple drinks, then on to the next research for me. You can find the sides&whitepaper here: https://t.co/9mykMqxfPh

[PortSwigger Research @PortSwiggerRes]

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling by @albinowax

https://t.co/Xa1GwNaIVd

[Burp Suite @Burp_Suite]

Burp Suite 2022.8.1 released to the Stable channel, with new scan checks based on the Browser-Powered Desync Attacks presented by @albinowax at Black Hat 2022, as well as new Repeater capabilities that let you test for these vulnerabilities manually.

https://t.co/MdOIOshQNf

[PortSwigger Research @PortSwiggerRes]

We've prototyped a new feature in repeater where we are diffing the last response with the current and showing different colours depending on what changes. Please check it out we'd love your feedback!

https://t.co/sfSRrzrQtF

[PortSwigger @PortSwigger]

This is a Burp extension, and it's only a prototype currently - check it out and feel free to share your thoughts with us!

[Burp Suite @Burp_Suite]

Burp Suite 2022.7.1 released to the Stable channel. You can now configure tab-specific options for Repeater and automatically detect client-side prototype pollution sources using Burp Scanner.

https://t.co/wOxHIQBIb8

[PortSwigger Research @PortSwiggerRes]

It's worth knowing @Burp_Suite project files are memory mapped. This means they reduce RAM consumption, but don't support garbage collection (yet) so deleting requests frees up RAM for Burp, but doesn't reduce file size. For long-term storage, use 'Project->Save copy' then zip.

[PortSwigger Research @PortSwiggerRes]

Framing without iframes by @garethheyes

https://t.co/rXRrcas6CW

[Hack Red Con @HackRedCon]

For this week's "There's a BApp for that", @Nu11ifidian shows how to use Stepper, a natural evolution of Burp Suite's Repeater tool to help automate “second-order�� attacks.

https://t.co/4nDxLHVWDh

#burpsuite #pentester #cybersecurity #infosec #cybersecuritytips #HackRedCon

[PortSwigger Research @PortSwiggerRes]

How we tune @Burp_Suite's performance:

- "Proxy->Options->Misc->Don't send items to Proxy history or live tasks, if out of scope"
- Enable "Project Options->HTTP->{keep-alive,HTTP/2}"
- Disable live-tasks & extensions

[Hack Red Con @HackRedCon]

Hey, Folks! Check this weekly series with Zachary Stashis called "There's a BApp for that". It shows a technical how-to-use of certain Burp Suite Plugins to help with Penetration Testing and Bug hunting.

https://t.co/kaG1kXPKnR

#cybersecurity #pentesting #HackRedCon

[BurpSuite.guide @BurpSuiteGuide]

@2imprez @Burp_Suite @BurpBounty Check if this article is helpful - https://t.co/zHzrRKrlcc