
Software engineer @PortSwigger https://xitter.cf/t.co/vFLBmHufvh
Joined June 2021
- Tweets36
- Following51
- Followers84
- Likes64
Alex retweeted
We're excited to announce we're partnering with SAP to strengthen the security of their cloud services.
Burp Suite’s leading DAST technology delivers automated, precise security testing, helping SAP meet their security needs at scale.
Read more 👉 bit.ly/41yMgCc
Alex retweeted
We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.
Alex retweeted
Welcome to the next evolution of Burp Suite… 🚀 #BurpAI
Alex retweeted
PortSwigger, the company behind the Burp Suite of security testing tools, swallows $112M tcrn.ch/4cm1JJ8
Alex retweeted
Google has apologised in style for breaking our dangling markup lab with new mitigations in Chrome. Thanks from @WebSecAcademy and @PortSwiggerRes!
Alex retweeted
Writing custom scan checks can be time-consuming, but Burp’s BChecks feature makes it quick and simple to add your own checks to Burp Scanner.
Find out how the team at @SprocketSec have done exactly that, and more…
portswigger.net/blog/support…
Alex retweeted
We've shortlisted the top ten submitted BChecks (so far), and now we'd like you to vote for your favourite.
Each BCheck will be shared as an individual reply to this tweet - simply hit the "Like" button for the BCheck you like the most.
Read more here: portswigger.net/blog/the-top…
Alex retweeted
It doesn’t matter what version of @Burp_Suite you use, you can’t deny they have a dope team.
Replying to @TomLefley
Thanks again, @Jhaddix, for highlighting this example. It's key to us that the crawler meets all the needs its designed for, so concrete examples of when it doesn't are invaluable.
Of course, let me know if any of my assumptions are incorrect, or if there are any further issues!
Alex retweeted
Wrote a couple of #BChecks today for @Burp_Suite Pro for the Adobe ColdFusion vulnerabilities.
- CVE-2023-29298 Access Control Bypass
- CVE-2023-26360 Arbitrary File Read and Code Execution
ColdFusion made me feel nostalgic..
from @PortSwigger with 🧡
github.com/PortSwigger/BChec…
Alex retweeted
PortSwigger's BChecks is insane. You're mistaken if you think it's just a Nuclei clone. Nuclei lets you check a limited number of locations for issues. Imagine you can leverage the crawling capabilities of Burp to search for NTLM auth everywhere on a target.
Alex retweeted
Professional / Community 2021.7 released, with DOM Invader, a new tool for testing DOM XSS. It also includes improved navigation of SPAs for Burp Scanner and a new learning resource.
portswigger.net/burp/release…



















