Mastering Burp Suite Pro

Tips and tricks for Burp Suite Pro
Managed by @Agarri_FR | Not affiliated with @Portswigger

More free resources at

[Mastering Burp Suite Pro @MasteringBurp]

I won't post here anymore. Feel free to join Bluesky or to read the content I post there by simply browsing my profile at https://t.co/0ol4DkXGIn

[Nicolas Grégoire @Agarri_FR]

Only one public on-site training session this year, and it will be in RomHack 🇮🇹 (registration link in replies)

And if you're not sure this course would fit you, just give a look at @carbonmanx feedback

[Nicolas Grégoire @Agarri_FR]

Come to Roma 🇮🇹 in September and attend the only in-person public training session I'll give in 2026! 👨‍🏫

And if you like camping with other hackers (as I do), stay over the weekend for the 3-day long RomHack Camp 🏕️

[Mastering Burp Suite Pro @MasteringBurp]

An interesting piece of trivia: the search bar works on custom columns (the ones created via bambdas) and also on hidden ones (whatever they are custom or not)

[Mastering Burp Suite Pro @MasteringBurp]

Since EA 2026.2, there's a a search bar in Proxy History and it doesn't work exactly like the usual display filter. Let me explain...

- the filter searches in requests, responses and notes
- the search bar looks for the keyword in the table of entries itself

[Nicolas Grégoire @Agarri_FR]

The 2026 online public sessions of my "Mastering Burp Suite Pro" course have been published

- March 24th to 27th, in French 🇫🇷
- April 14th to 17th, in English 🇬🇧

https://t.co/7ysNLmvJat

PS: ping me if you'd like to temporarily block a seat or are looking for a 10% coupon 🎁

[Mastering Burp Suite Pro @MasteringBurp]

I won't post here anymore. Feel free to join Bluesky or to read the content I post there by simply browsing my profile at https://t.co/0ol4DkXGIn

[Mastering Burp Suite Pro @MasteringBurp]

Plenty of new followers today 📈

To be honest, I don’t really use X anymore, and I invite all of you to follow me on Bluesky, where I post regularly

https://t.co/ocrtf0PpiF

[Mastering Burp Suite Pro @MasteringBurp]

I just added the 15-minute talk I gave at Tumpicon to the "Freebies" section

This talk covers the extensions Piper and Scalpel, and allows users to easily manipulate encrypted data by shuffling blocks around

https://t.co/5dpshpwjaZ

[Mastering Burp Suite Pro @MasteringBurp]

I just added the 15-minute talk I gave at Tumpicon to the "Freebies" section

This talk covers the extensions Piper and Scalpel, and allows users to easily manipulate encrypted data by shuffling blocks around

https://t.co/5dpshpwjaZ

[Web Security Academy @WebSecAcademy]

What's your best @Burp_Suite tip or trick and where did you learn it?

[Mastering Burp Suite Pro @MasteringBurp]

@CryptoGangsta @WebSecAcademy I'm very happy the course was useful

[Mastering Burp Suite Pro @MasteringBurp]

If you never used the Piper extension, I recommend to watch the 4-minute demo I gave last year during my talk at @NorthSec_io 🛠️

https://t.co/Quprjr4bHw

[Mastering Burp Suite Pro @MasteringBurp]

Reminder: we're also on Bluesky 🦋
https://t.co/0ol4DkXGIn

[Mastering Burp Suite Pro @MasteringBurp]

The extension "Bypass Bot Detection" (which works really well) is now in the BApp Store 🥳
https://t.co/tYY8ATzXNq

[Mastering Burp Suite Pro @MasteringBurp]

The Early Adopter v2025.1 of Burp Suite Pro fixes the bug where the Home and End keys caused the cursor to jump to a different line 🥳

https://t.co/lOJjExRrQj

[Mastering Burp Suite Pro @MasteringBurp]

A little bird told me that @metasploit is working on a persistence mechanism based on @burpsuite extensions 👀

https://t.co/b9woagghFV

[Mastering Burp Suite Pro @MasteringBurp]

A good reminder that Intruder’s "Simple list" payload type doesn’t work well with huge files like rockyou.txt 🛠️

[Mastering Burp Suite Pro @MasteringBurp]

@w1th4d @space @newline 😅

[Mastering Burp Suite Pro @MasteringBurp]

Hackvertor now supports tags `<@space/>` and `<@newline/>`

That doesn't look like a game-changer, but it's incredibly useful when you want to avoid that these raw characters break Burp's HTTP parsing

[Mastering Burp Suite Pro @MasteringBurp]

@irsdl @space @newline Same, I never use "URL-encode as you type", among other reasons because pasting != typing

And I use the urlencode tag a lot, let's see if that changes now that we have these two new tags