Collaborate Disseminate
AI isn’t just reshaping cybersecurity – it’s challenging testers to rethink their entire playbook. In his latest article, “Hacking with Burp AI in the Chesspocalypse”, API expert Corey Ball draws less Continue reading Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.
In her latest video, CyberMaddy dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-sit Continue reading Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI
What happens when you set Burp AI loose on a deliberately vulnerable web app? In his latest video, Tib3rius takes Burp’s new agentic Burp AI capabilities for a spin – and the results are seriously coo Continue reading Burp AI takes on a vulnerable web app: watch Tib3rius put Burp’s new agentic capabilities to the test
At Black Hat USA 2025 and DEF CON 33, PortSwigger’s Director of Research, James Kettle, unveiled new HTTP desync techniques that prove one thing beyond doubt: HTTP/1.1 is broken, and every organizatio Continue reading HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security
The latest Hacker-Powered Security Report from HackerOne makes one thing clear: AI-assisted pentesting isn’t a future trend; it’s today’s reality. In HackerOne’s 2025 report, 70% of surveyed researche Continue reading The future of pentesting is Human x AI, and it’s already in Burp Suite Professional
Bug bounty legend, NahamSec, has taken Burp AI for a spin. If you’re curious how Burp AI fits into a real workflow, his new video is the perfect place to start. Watch on YouTube Burp AI was built to a Continue reading Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
Whether you’re navigating a client pentest or chasing a bounty target, even the most experienced testers hit roadblocks, burn time on repetitive tasks, or just want a second opinion. Burp AI is design Continue reading Welcome to AI pentesting – add on-demand AI assistance directly to your workflow with new, agentic Burp AI capabilities
Note: This is a guest post by pentester and researcher, Tom Stacey (@t0xodile). You’d think that after almost 21 years since its initial public discovery, HTTP Request Smuggling would be barely exploi Continue reading How to join the desync endgame: Practical tips from pentester Tom Stacey
Arman S., a full-time independent security researcher and bug bounty hunter, talked us through how he uses Burp Suite Professional and HackerOne in tandem to find and report high-value security vulner Continue reading How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities
Application security teams are under pressure. With expanding application estates, growing API usage, and faster release cycles, many teams struggle to keep up. Backlogs grow, releases are delayed, an Continue reading Watch the webinar: Scale secure coverage without scaling headcount