Collaborate Disseminate
Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). Methodology Key results Examples Key learnings Prompt template A pentester’s POV on Burp AI Pentester Julen Garrido Es Continue reading Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test
In 2025, we set out with a simple mission: take Burp Suite on the road and meet the global AppSec community where you are. Burp On Tour was born from our desire to learn from you; the brilliant people Continue reading Burp On Tour 2025: bringing the AppSec community together around the world
AppSec teams are under constant pressure to secure fast-moving applications without slowing anything down. But scanning windows, fragile authentication, and sprawling API estates often get in the way Continue reading DAST without disruption: Burp Suite DAST winter update 2025
Detecting React2Shell with Burp Suite Two new critical vulnerabilities, collectively known as React2Shell (CVE-2025-55182 and CVE-2025-66478), are rapidly gaining traction in the security community. D Continue reading How to detect React2Shell with Burp Suite
Every December, TryHackMe’s Advent of Cyber brings the security community together around a simple idea: learn something new by getting hands-on. Each day during the festive season reveals a beginner- Continue reading PortSwigger x TryHackMe: Supporting Advent of Cyber
AI isn’t just reshaping cybersecurity – it’s challenging testers to rethink their entire playbook. In his latest article, “Hacking with Burp AI in the Chesspocalypse”, API expert Corey Ball draws less Continue reading Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.
In her latest video, CyberMaddy dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-sit Continue reading Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI
What happens when you set Burp AI loose on a deliberately vulnerable web app? In his latest video, Tib3rius takes Burp’s new agentic Burp AI capabilities for a spin – and the results are seriously coo Continue reading Burp AI takes on a vulnerable web app: watch Tib3rius put Burp’s new agentic capabilities to the test
At Black Hat USA 2025 and DEF CON 33, PortSwigger’s Director of Research, James Kettle, unveiled new HTTP desync techniques that prove one thing beyond doubt: HTTP/1.1 is broken, and every organizatio Continue reading HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security
The latest Hacker-Powered Security Report from HackerOne makes one thing clear: AI-assisted pentesting isn’t a future trend; it’s today’s reality. In HackerOne’s 2025 report, 70% of surveyed researche Continue reading The future of pentesting is Human x AI, and it’s already in Burp Suite Professional