Results

PROFESSIONAL COMMUNITY

Bambdas

Bambdas are scripts that you can run directly from Burp Suite's interface. They enable you to quickly personalize various tasks, such as creating custom ...

PROFESSIONAL COMMUNITY

Testing for web message DOM XSS with DOM Invader

Web message DOM XSS occurs if the destination origin for a web message trusts the sender not to transmit malicious data in the message, and handles the data ...

PROFESSIONAL COMMUNITY

HTTP/2 basics for Burp users

In this section, we'll provide a brief overview of some of the fundamentals of HTTP/2. We'll focus exclusively on the parts that are relevant to Burp. A ...

PROFESSIONAL COMMUNITY

Evaluating inputs with Burp Suite

Once you have discovered functionality that is worth investigating further, you can use a range of Burp's tools to evaluate the user controllable inputs. ...

PROFESSIONAL COMMUNITY

Identifying high-risk functionality with Burp Suite

You can use the Target site map and the Proxy history to identify high-risk functionality as you browse your target website. This enables you to plan how ...

PROFESSIONAL

Active scan check worked example

You can extend Burp Scanner by writing your own scan checks. A custom scan check can report new security issues that Burp doesn't detect natively. In this ...

PROFESSIONAL COMMUNITY

Credential stuffing with Burp Suite

Credential stuffing is a form of brute-force attack in which you attempt to log into a website using known username and password combinations from other ...

PROFESSIONAL COMMUNITY

Setting up your extension development environment using the starter project

The starter project simplifies extension development using the Montoya API. Instead of setting up your development environment manually, you can download ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

PROFESSIONAL

Importing custom scan checks into your library

You can import custom scan checks into your library that have been shared with you or downloaded from our Bambda scripts repository or BChecks repository. ...