Since @PortSwigger won't be producing a third edition of The Web Application Hacker's Handbook, the @Burp_Suite team is working on something better: online, interactive, actively maintained, and best of all completely free!
More details to follow soon.
Burp Suite
7,378 posts
Burp Suite is the leading software for web security testing.
Joined November 2013
- Blog post: Introducing the Web Security Academy
- We are proud to launch our brand new interactive XSS cheatsheet featuring novel vectors from @garethheyes
- Coming soon, Burp Suite is getting a make-over with a cleaner, more modern UI. #Tease
- HTTP Desync Attacks: Request Smuggling Reborn
- You can now scan for Log4Shell (CVE-2021-44228) using Burp Suite Pro or Enterprise Edition by installing @SilentSignalHU’s Log4Shell Scanner from the BApp Store. portswigger.net/bappstore/b011…
- How would you like it if @Burp_Suite could render non-printing characters, like this? Note that this feature would be optional, off-by-default.
- How would you like it if @Burp_Suite automatically pretty-aligned HTTP request/response headers, like this?
- Burp Suite Pro/Community 2020.4 released, with automatic pretty-printing of JSON, XML, HTML, CSS, and JavaScript. portswigger.net/burp/releases/…
GIF








