Collaborate Disseminate
More power for bug hunters An education-first approach to bug bounty Rewards on Meta’s Bug Bounty Platform Our shared vision Ready to get started? We’re excited to announce a new partnership with Meta Continue reading PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses
Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). 1. Acknowledgements 2. Intro 3. Required tools 4. Strategy to solve/exploit the lab 5. Detecting 0.CL 5.1. Practical confirmatio Continue reading HTTP/1.1 Must Die: Conquering the 0.CL Challenge
I’m a firm believer that if you want to understand how secure an application really is, you have to test how it behaves, not just how it was written. Automation has become essential to that. No AppSec Continue reading Automation without alignment: The hidden cost of modern DAST
At PortSwigger, we’re always looking for ways to enable the world to secure the web, and today we’re excited to take that mission a step further. We’re pleased to announce a new collaboration bringing Continue reading PortSwigger X Intigriti: Burp Suite Professional licenses up for grabs with this new collaboration
Note: This is a guest post by IT security consultant Adarsh Kumar. I’ve been using Burp Suite day to day for years, so when Burp AI was introduced, I was curious how it would actually hold up dur Continue reading How I sped up exploit validation in Repeater using Burp AI
Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). Methodology Key results Examples Key learnings Prompt template A pentester’s POV on Burp AI Pentester Julen Garrido Es Continue reading Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test
In 2025, we set out with a simple mission: take Burp Suite on the road and meet the global AppSec community where you are. Burp On Tour was born from our desire to learn from you; the brilliant people Continue reading Burp On Tour 2025: bringing the AppSec community together around the world
AppSec teams are under constant pressure to secure fast-moving applications without slowing anything down. But scanning windows, fragile authentication, and sprawling API estates often get in the way Continue reading DAST without disruption: Burp Suite DAST winter update 2025
Detecting React2Shell with Burp Suite Two new critical vulnerabilities, collectively known as React2Shell (CVE-2025-55182 and CVE-2025-66478), are rapidly gaining traction in the security community. D Continue reading How to detect React2Shell with Burp Suite
Every December, TryHackMe’s Advent of Cyber brings the security community together around a simple idea: learn something new by getting hands-on. Each day during the festive season reveals a beginner- Continue reading PortSwigger x TryHackMe: Supporting Advent of Cyber