Collaborate Disseminate
You’ve might have heard of Lambdas. But have you heard of Bambdas? They’re a unique new way to customize Burp Suite directly from the UI, using only small snippets of Java. Changing the face of Burp S Continue reading Introducing Bambdas
What is DOM Invader? DOM Invader is a browser extension that makes it easy to find DOM based XSS by instrumenting various JavaScript functions. You can find out more about DOM Invader here: Introducin Continue reading DOM Invader and the case of direct eval vs indirect eval
When you’re starting out in the world of web security, it can be overwhelming trying to work out where to begin. There are dozens of vulnerability classes, and numerous exploit techniques to learn abo Continue reading New learning paths, from the Web Security Academy
The US-based organization Sprocket Security provides continuous penetration testing services to customers by monitoring clients’ attack surfaces and searching for new and novel exploitation techniques Continue reading Supporting Sprocket Security’s offensive security testing with BChecks, from Burp Suite
For too long, web race-condition attacks have focused on a tiny handful of scenarios. Testing for them is inherently unreliable, compounded by known challenges relating to time constraints and network Continue reading New techniques and tools for web race conditions
We recently launched BChecks, scripted scan checks that allow you to create customized scans without the hassle of learning advanced programming. We’ve shortlisted the top ten BChecks (so far) that ha Continue reading The top 10 community-created BChecks, so far …
I love it when Chrome releases a new feature, I especially like it when it is experimental. In this post I’m going to show you how I created Tic Tac Toe (Noughts and crosses) with HTML, using one of t Continue reading Implementing Tic Tac Toe with 170mb of HTML – no JS or CSS
Check out our roadmap for Burp Suite and find out what exciting features are coming your way over the next 12 months. Burp Suite Professional Added to the roadmap Added BChecks – testing tool – When c Continue reading Burp Suite roadmap update: July 2023
As a penetration tester, you need your tools to find the latest vulnerabilities. GraphQL APIs are widely used on today’s websites, and expose attack surface for a wide range of security issues. Burp S Continue reading Find GraphQL API vulnerabilities, with Burp Suite Professional
Want to create customized scans without the hassle of learning advanced programming? Burp Suite’s got you covered. Scripted scan checks – or BChecks – are now a full reality with the 2023.6 release of Continue reading We want to check out your BChecks …