Presented without commentary

#burp #burp_suite #ux

3/ 🕵️♂️ CASE STUDY: How We Saved a Unicorn
Client: Series B SaaS with 200K users
Threat:

→ API endpoints exposed via misconfigured @AWScloud S3 buckets

→ 4.7M user records at risk
Our 72-Hour Fix:

→ Pen testing via @Burp_Suite

→ Auto-patching with @GitHub Advanced…

I got a chance to try out @Burp_Suite Burp AI, and it's... honestly really cool 😅 Video showcase where we cruise through a web app scan, crawl and audit, and it rips through findings including an explicit UNION SQL injection vulnerability and more 🤩 youtu.be/v-McepNOrTQ

@Burp_Suite extension Burpference allows you to capture in-scope HTTP requests and responses from Burp Suite’s proxy history and ship them to a remote LLM API in JSON format.

We just published on the @hnsec blog the eighth article on the creation of extensions for @Burp_Suite named "Extending Burp Suite for fun and profit - The Montoya way", by @apps3c.

Topic: BChecks - A quick way to extend Burp Suite Active and Passive Scanner […]

We’ve just published on the @hnsec blog the seventh article on the creation of extensions for @burp_suite "Extending Burp Suite for fun and profit - The Montoya way", by @apps3c.

Topic: using the #collaborator in #burpsuite plugins […]

#SwissPass blocking @Burp_Suite, not sure if this is the right approach since it's also in scope of the @RailService #BugBounty program on @intigriti 🙄

Faction now has integration in the @Burp_Suite Bapp Store!!💥 🚀 🎉 ⭐️

portswigger.net/bappstore/f4...

#appsec #infosec #pentesting #redteam #securitytools #vulnerability

"ethical" hackers using cracked @Burp_Suite in #bugbounty submissions ¯\_(ツ)_/¯

Fan video on ZeroTier + @Burp_Suite — https://www.youtube.com/watch?v=uuS0HLVS5_4

Learn Adv Web #AppSec in a training in Montreal from a prolific @Burp_Suite plugin author and appsec hero. Act fast!
https://www.nsec.io/2017/01/attacking-the-web-training_with-great-power-comes-great-vulnerabilities/