To wrap up #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador@apps3c just released AI Reporter, a Burp Suite extension that brings AI-powered automation to penetration test reporting using Burp AI or a local Ollama instance. https://t.co/9maqrGYyko
As part of #BurpExtensibilityMonth initiatives, last week our Research Lead and #BurpAmbassador@apps3c gave a talk titled “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Video, slides and code:
https://t.co/CVPAcMDm2V
#HNSecurity has brand new headquarters in #Turin!
A bigger space. A proper hacking lab, because our researchers deserve the right playground.
And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen. 👨🏻🍳
https://t.co/6W6yI9BYig
As part of #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador@apps3c is joining @PortSwigger on @discord later today for “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.
Don’t miss it!
https://t.co/FV2PcKKlYu
Next week for Extensibility Month on Discord 👇
📥 Submitting extensions to the BApp Store
📝 Writing your Burp extension
🗣️ “Restoring Testability: Handling Complex Scenarios in Burp Suite with a Custom Extension” with Burp Ambassador, @apps3c
🆕 Deep dive on Swapper with the author, Dave Blandford
Join us on Discord as we continue celebrating Burp Suite extensibility and the community building around it.
https://t.co/7y24n18mpU
To celebrate the @Burp_Suite Extensibility Month, the tenth article of the series "Extending Burp Suite for fun and profit - The Montoya way" is out! The topics of this tenth part is "Burp AI"!
Stay tuned for a new extension on the topic on @BApp_Store!
https://t.co/BwMuePkrSu
To kick off his collaboration with @PortSwigger as a Burp Suite Ambassador, our Research Lead @apps3c just published the 10th article on the creation of extensions for @Burp_Suite. Topic: Burp #AI!
https://t.co/PErtADr0l4
🚀 Extensibility Month is launching on the PortSwigger Discord!
Join us for a month of events, resources, and community discussion all about creating, sharing, and getting more from Extensibility in Burp Suite.
#BurpSuite#BurpExtensibility
You’ll soon see Burp Ambassadors contributing research, events, educational content, and community initiatives around the world. Read the full blog 👉https://t.co/ddAuZ70BnY
happy new year 🚀
once again, I want to kick off the year by sharing some of my favorite firmware & low-level security research of 2025:
BaseBridge: Bridging the Gap between Over-The-Air and Emulation Testing for Cellular Baseband Firmware [1]
Another Crack in the Chain of Trust: Uncovering (Yet Another) Secure Boot Bypass [2]
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering [3]
Streamlining vulnerability research with IDA Pro and Rust [4]
An Empirical Study of Human–LLM Teaming in Software Reverse Engineering [5]
Understanding RTOS Firmware [6]
Hey developers and vulnerability researchers!
I'm working on improving my C/C++ #Semgrep ruleset, and I've just published the v1.1.0 release: https://t.co/UQpsnQ8Grv
Please test it inside and out, open issues or submit PRs. Aiming for a major release sometime before spring.
Our senior security analyst @0x_nope has published a follow-up to his popular #Groovy Template Engine #Exploitation writeup:
https://t.co/wDLxybF3v1
Check out some new practical exploitation tricks that he figured out while working on a real-world scenario.
I released an updated version of Brida (0.6), fully compatible with @fridadotre >= 17! You can download the new release from GitHub and soon from the @Burp_Suite BAppStore.
https://t.co/OHXuYMkhNu
#Brida 0.6 is here! The bridge between #BurpSuite and #Frida is now fully compatible with Frida 17+.
For users who still rely on older Frida versions, Brida 0.6pre remains available on GitHub.
https://t.co/wchgATzvDF
Coming soon to the BApp Store (pending approval).
If you’re into #ReverseEngineering, #VulnerabilityResearch, or #Rust, don’t miss @0xdea’s latest:
Streamlining Vulnerability Research with the idalib Rust Bindings for IDA 9.2 💻 🦀 Now live on our restyled blog!
https://t.co/nHOxQoGnFs