---
id: 229
title: "Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters."
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/hacking-with-burp-ai-in-the-chesspocalypse-api-expert-corey-ball-showcases-how-burp-ai-can-support-pentesters"
published_at: "2025-11-14 15:09"
tags: ["ai-security", "cloud", "sql-injection", "api-security", "portswigger", "burp-ai", "pentest", "nosql-injection"]
phying_url: "https://phying.com/item/229"
lang: en
---

# Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.

## Summary

API expert Corey Ball uses a chess analogy to show Burp AI as a sparring partner in pentesting, pivoting from failed SQL injection to NoSQL injection to expose a critical coupon-data flaw.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-11-14 15:09
- **Original:** https://portswigger.net/blog/hacking-with-burp-ai-in-the-chesspocalypse-api-expert-corey-ball-showcases-how-burp-ai-can-support-pentesters
- **Phying News:** https://phying.com/item/229