HN Security

Penetration testing, red teaming, and security by design delivered by world-class cybersecurity experts.

[HN Security @hnsec]

To wrap up #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance.

https://t.co/9maqrGYyko

[HN Security @hnsec]

As part of #BurpExtensibilityMonth initiatives, last week our Research Lead and #BurpAmbassador 
@apps3c gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.

Video, slides and code:
https://t.co/CVPAcMDm2V

[HN Security @hnsec]

#HNSecurity has brand new headquarters in #Turin! 

A bigger space. A proper hacking lab, because our researchers deserve the right playground.

And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen. 👨🏻‍🍳

https://t.co/6W6yI9BYig

[HN Security @hnsec]

As part of #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c is joining @PortSwigger on @discord later today for “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.

Don’t miss it!
https://t.co/FV2PcKKlYu

[Burp Suite @Burp_Suite]

Next week for Extensibility Month on Discord 👇

📥 Submitting extensions to the BApp Store
📝 Writing your Burp extension
🗣️ “Restoring Testability: Handling Complex Scenarios in Burp Suite with a Custom Extension” with Burp Ambassador, @apps3c
🆕 Deep dive on Swapper with the author, Dave Blandford

Join us on Discord as we continue celebrating Burp Suite extensibility and the community building around it.
https://t.co/7y24n18mpU

[Federico Dotta @apps3c]

To celebrate the @Burp_Suite Extensibility Month, the tenth article of the series "Extending Burp Suite for fun and profit - The Montoya way" is out! The topics of this tenth part is "Burp AI"!

Stay tuned for a new extension on the topic on @BApp_Store!

https://t.co/BwMuePkrSu

[HN Security @hnsec]

To kick off his collaboration with @PortSwigger as a Burp Suite Ambassador, our Research Lead @apps3c just published the 10th article on the creation of extensions for @Burp_Suite. Topic: Burp #AI!

https://t.co/PErtADr0l4

[Burp Suite @Burp_Suite]

🚀 Extensibility Month is launching on the PortSwigger Discord!

Join us for a month of events, resources, and community discussion all about creating, sharing, and getting more from Extensibility in Burp Suite.

#BurpSuite #BurpExtensibility

[PortSwigger @PortSwigger]

Meet the Burp Ambassadors: @apps3c 🇮🇹

Federico Dotta is an offensive security researcher with a deep focus on Burp Suite extensibility.

#BurpAmbassador #BurpSuite #BurpExtensibility #BApps

[PortSwigger @PortSwigger]

You’ll soon see Burp Ambassadors contributing research, events, educational content, and community initiatives around the world. Read the full blog 👉https://t.co/ddAuZ70BnY

[PortSwigger @PortSwigger]

Introducing the official Burp Ambassador Program! 🧡

@0xTib3rius @rana__khalil @apps3c @hAPI_hacker @soyel_mago

#BurpAmbassador #BurpSuite

[lukas seidel @pr0me]

[1] https://t.co/phRbq0RAIy by @danielklischies @nSinusR @noopwafel et al.

[2] https://t.co/hU5PRRSLZt by @binarly_io

[3] https://t.co/0FMegk7Wi6 by @evilsocket

[4] https://t.co/jEQNKDSYjJ by @0xdea

[5] https://t.co/R4hkE2m3J2 by @mahal0z @AnantaSoneji @adamdoupe et al.

[6] https://t.co/JM4aHA8jn5 by @onekey_sec @qkaiser

[lukas seidel @pr0me]

happy new year 🚀

once again, I want to kick off the year by sharing some of my favorite firmware & low-level security research of 2025:

BaseBridge: Bridging the Gap between Over-The-Air and Emulation Testing for Cellular Baseband Firmware [1]

Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass [2]

TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering [3]

Streamlining vulnerability research with IDA Pro and Rust [4]

An Empirical Study of Human–LLM Teaming in Software Reverse Engineering [5]

Understanding RTOS Firmware [6]

[HN Security @hnsec]

In this latest article in our long-running series on #BurpSuite #Extension #Development, @apps3c illustrates how to extend the Active and Passive Scanner in your favorite #WebApplication #PenetrationTesting tool with Custom Scan Checks:

https://t.co/dA1odbIkoc

Check it out!

[raptor @0xdea]

Hey developers and vulnerability researchers!

I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: https://t.co/UQpsnQ8Grv

Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.

[HN Security @hnsec]

Our senior security analyst @0x_nope has published a follow-up to his popular #Groovy Template Engine #Exploitation writeup:

https://t.co/wDLxybF3v1

Check out some new practical exploitation tricks that he figured out while working on a real-world scenario.

[Federico Dotta @apps3c]

I released an updated version of Brida (0.6), fully compatible with @fridadotre >= 17! You can download the new release from GitHub and soon from the @Burp_Suite BAppStore.

https://t.co/OHXuYMkhNu

[HN Security @hnsec]

#Brida 0.6 is here! The bridge between #BurpSuite and #Frida is now fully compatible with Frida 17+.

For users who still rely on older Frida versions, Brida 0.6pre remains available on GitHub.

https://t.co/wchgATzvDF

Coming soon to the BApp Store (pending approval).

[HN Security @hnsec]

If you’re into #ReverseEngineering, #VulnerabilityResearch, or #Rust, don’t miss @0xdea’s latest:

Streamlining Vulnerability Research with the idalib Rust Bindings for IDA 9.2 💻 🦀 Now live on our restyled blog!

https://t.co/nHOxQoGnFs

[raptor @0xdea]

It’s a real pleasure to be featured in the @HexRaysSA blog! Thanks for having me.