Software engineer @PortSwigger https://xitter.cf/t.co/vFLBmHufvh

Joined June 2021
We're excited to announce we're partnering with SAP to strengthen the security of their cloud services. Burp Suite’s leading DAST technology delivers automated, precise security testing, helping SAP meet their security needs at scale. Read more 👉 bit.ly/41yMgCc
1
4
9
2,038
We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.
11
49
10
239
42,464
Welcome to the next evolution of Burp Suite… 🚀 #BurpAI
36
193
59
1,340
160,513
🕵️ 🤫 #BlackHat #Defcon32
5
26
2
193
20,948
Replying to @Cyber78678
60
90
50
1,109
74,405
FYI a new BCheck grammar is available in Burp Suite Pro Stable 2023.3.4
3
11
2,657
Google has apologised in style for breaking our dangling markup lab with new mitigations in Chrome. Thanks from ⁦@WebSecAcademy⁩ and ⁦@PortSwiggerRes⁩!
4
15
1
152
22,332
Replying to @fransrosen
But does it even Bcheck?
1
1
12
5,549
Web Security vs. Binary Exploitation
95
1,866
203
10,011
835,790
Writing custom scan checks can be time-consuming, but Burp’s BChecks feature makes it quick and simple to add your own checks to Burp Scanner. Find out how the team at @SprocketSec have done exactly that, and more… portswigger.net/blog/support…
1
8
33
7,860
We've shortlisted the top ten submitted BChecks (so far), and now we'd like you to vote for your favourite. Each BCheck will be shared as an individual reply to this tweet - simply hit the "Like" button for the BCheck you like the most. Read more here: portswigger.net/blog/the-top…
10
15
2
57
20,067
It doesn’t matter what version of @Burp_Suite you use, you can’t deny they have a dope team.
Replying to @TomLefley
Thanks again, @Jhaddix, for highlighting this example. It's key to us that the crawler meets all the needs its designed for, so concrete examples of when it doesn't are invaluable. Of course, let me know if any of my assumptions are incorrect, or if there are any further issues!
2
2
33
8,058
1
8
113
11,076
Wrote a couple of #BChecks today for @Burp_Suite Pro for the Adobe ColdFusion vulnerabilities. - CVE-2023-29298 Access Control Bypass - CVE-2023-26360 Arbitrary File Read and Code Execution ColdFusion made me feel nostalgic.. from @PortSwigger with 🧡 github.com/PortSwigger/BChec…
10
1
18
6,388
The @PortSwigger social media team are gearing up for another shoot. @TomLefley @djpaterson93
3
7
45
10,581
PortSwigger's BChecks is insane. You're mistaken if you think it's just a Nuclei clone. Nuclei lets you check a limited number of locations for issues. Imagine you can leverage the crawling capabilities of Burp to search for NTLM auth everywhere on a target.
9
54
3
299
51,037