Discover and read the best of Twitter Threads about #BurpSuite
Most recents (3)
Burpsuite frameworks.
A thread 👇🧵
#bugbounty #hacking #infosec #bugbountytips #cybersecurity #burpsuite
A thread 👇🧵
#bugbounty #hacking #infosec #bugbountytips #cybersecurity #burpsuite
1️⃣ Use burpsuite to intercept and modify traffic between your web browser and a web application. This can help you test the application's security and identify vulnerabilities.
2️⃣ Use burpsuite's spider tool to automatically crawl an application and discover its functionality and content. This can help you identify hidden pages and areas of the application that may be vulnerable.
New to @Burp_Suite? We've got 3 new tutorials that should help you get off to a flying start.
A short thread 🧵:
A short thread 🧵:
Intercept and modify HTTP requests with Burp Proxy and experience Burp's preconfigured embedded browser: portswigger.net/burp/documenta…
Get to know Burp Repeater with a guided tour through one of our @WebSecAcademy labs:
portswigger.net/burp/documenta…
portswigger.net/burp/documenta…
I've been using AutoRepeater for years & I know from collabs/experience that not all are using it. I find it works magic in automating access control or other types of tests if you know how to configure it, so let's make an epic thread for AutoRepeater! #infosec #bugbounty [1]
AutoRepeater (AR) allows you to replace stuff on requests, with creative you can test limitless scenarios. It has 2 tabs 1) Base Replacements, 2) Replacements. Replacements are applied on top of Base Replacements. For each Replacement, a new request is generated. [2]
Let's look at a standard example. An app trasmits the organisation's UUID for operations in cookies, URL and other HTTP headers. Test its access control by replacing a string across the whole request, in this case the UUID. [3] 
