Collaborate Disseminate
We launched the Web Security Academy in April 2019, as a means of providing free training and learning materials for security professionals. We now have 200 labs, and last year the Web Security Academ Continue reading Introducing the Burp Suite Certified Practitioner accreditation
Apparently we’re halfway through 2021 already (where does the time go?). Here’s an update on what we’ve added to our products so far this year, as well as some exciting new features we’re adding to ou Continue reading Burp Suite roadmap update: July 2021
Two years ago, PortSwigger’s director of research James Kettle presented “HTTP Desync Attacks” on-stage at BlackHat USA and kicked off a wave of request smuggling, but at that time HTTP/2 escaped seri Continue reading Black Hat USA 2021: PortSwigger’s latest research to be unveiled
Of the three main types of XSS, DOM-based XSS is by far the most difficult to find and exploit. But we come bearing good news! PortSwigger just released a new tool for Burp Suite Professional and Burp Continue reading Introducing DOM Invader: DOM XSS just got a whole lot easier to find
The Burp Suite user community can easily be described as passionate, dedicated, and highly invested in the development of our product. That’s why we love it when our users take it upon themselves to q Continue reading 20 Burp Suite tips from the Burp user community
As we mentioned in our recent blog post on good resources for new Burp Suite Professional users, the BApp Store is one of the largest repositories of community-created user content you’re likely to fi Continue reading Some of the best Burp extensions – as chosen by you
If you’re new to Burp Suite Professional, then congratulations. Not only have you just bought into the world’s leading toolkit for web security testing – you’ve also joined a massive worldwide communi Continue reading Great getting started resources for new users of Burp Suite Professional
Quick link: Burp Suite Enterprise Edition live demo. Deploying enterprise-grade software isn’t always easy. We wanted a quick way for people to see the core features of Burp Suite Enterprise Edition w Continue reading <span>Experience Burp Suite Enterprise Edition in a new live demo</span>
If you’re using Burp Suite to test your website, it’s probably got some way for users to log in – and chances are it’s more complicated than filling in a username and password and hitting submit. Burp Continue reading Recorded logins in Burp Scanner
Webinar recording: How to Perform Effective Web Application Security Assessments On 6 April, PortSwigger teamed up with HackerOne to bring you AppSec insights from industry expert Burp Suite users. Le Continue reading AppSec experts share Burp Suite automation secrets and best practices