Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI

portswigger.net | blog | #ai-security | #bug-bounty | #agentic-ai | #sql-injection | #xss | #burp-ai | #video

Summary

In her latest video, CyberMaddy tests Burp AI's agentic capabilities in Repeater, sharing the exact prompts she uses to guide the LLM in finding SQL injection, XSS and insecure configurations.
Published
Collected

original ↗

Related coverage

  1. Burp AI takes on a vulnerable web app: watch Tib3rius put Burp’s new agentic capabilities to the test (portswigger.net)
  2. Hacking smarter with Burp AI: NahamSec puts Burp AI to the test (portswigger.net)
  3. What’s changed in AI security over the past two years (bugcrowd.com)
  4. The hidden cost of agentic pentesting (bugcrowd.com)
  5. PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting (crowdstrike.com)
  6. Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spin (portswigger.net)

back