Collaborate Disseminate
Last year we made it significantly easier to find DOM XSS, when we introduced a brand new tool called DOM Invader. This year, we’ve improved DOM Invader to make finding CSPP (client-side prototype pol Continue reading Finding client-side prototype pollution with DOM Invader
If you’ve ever installed any Burp extensions from the BApp Store, you’ll know that it’s a great way to extend your capabilities and tailor Burp Suite to your every need. If you’ve not, then what are y Continue reading How to see the impact installing BApps might have on Burp Suite
Thank you to those who attended our recent PortSwigginar on Burp Suite Enterprise Edition. Below is the video of the session, which included; A recap on “what’s new” within the tool for those who have Continue reading Launching the PortSwigginar
“Word”. We heard that a lot of you have been having problems finding a truly dope vulnerable web application to wave your scanner at. As makers of the web’s OG vulnerability scanner, we couldn’t be le Continue reading Gin and Juice Shop: put your scanner to the test
Speaking to Burp Suite Enterprise Edition users, one thing has come up time and time again as a blocker to your understanding of the product. This has been our use of the term “agent” when describing Continue reading Confused by agents? We’ve cleaned up our jargon …
Burp Suite Enterprise Edition is the dynamic web vulnerability scanner that can help you to secure your whole portfolio. To help you achieve that, this article contains some advice on how to optimize Continue reading Burp Suite Enterprise Edition: config tips for scanning success
Burp Suite Professional version 2022.2.3 made Burp Scanner’s crawler between 6x – 9x faster when used against static or stateless sites. This helps you to carry out automated reconnaissance much faste Continue reading Burp Scanner can now crawl static sites between 6x – 9x faster
Burp Suite Enterprise Edition is the dynamic vulnerability scanner that can help you to secure your whole web portfolio. And with release 2022.3, we’ve taken those same flexible Burp scans and made th Continue reading Burp Suite Enterprise Edition Kubernetes deployment and auto-scaling
Here at PortSwigger, our goal is to enable the world to secure the web. Our scanner sits at the core of this value – quickly surfacing issues and vulnerabilities that may be present in a web applicati Continue reading Passive-aggressive scan checks
For anyone who’s used the Web Security Academy before, you’ll be pretty familiar with the format. For those of you who haven’t had the pleasure, the process goes a little bit like this: Select a set o Continue reading Introducing the mystery lab challenge