PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI

portswigger.net | blog | #ai-security | #bug-bounty | #agentic-ai | #sql-injection | #xss | #burp-ai | #video
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In her latest video, CyberMaddy tests Burp AI's agentic capabilities in Repeater, sharing the exact prompts she uses to guide the LLM in finding SQL injection, XSS and insecure configurations.
Published
Collected

Related coverage

blog · portswigger.net
Burp AI takes on a vulnerable web app: watch Tib3rius put Burp’s new agentic capabilities to the test
In his latest video, Tib3rius tests Burp AI's agentic capabilities against a vulnerable web app, showing it autonomously exploit findings, flag false positives and craft targeted exploits.
blog · portswigger.net
Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
Bug bounty hunter NahamSec demonstrates Burp AI in a video walkthrough covering Repeater prompts, Explore Issue follow-ups, the Explainer feature, AI recorded logins and noise reduction.
research · portswigger.net
Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spin
Security researcher John Hammond tests Burp AI in a video walkthrough, showing how it identifies subtle vulnerabilities, reduces false positives and augments testers without replacing them.
research · yokai.hakaisecurity.io
SQL Injection e Vulnerabilidade XSS no Centreon
Eu sou Daniel França Lima e sou pentester Jr e pesquisador de vulnerabilidades na Hakai Offensive Security. Com o objetivo de ajudar a comunidade de hackers, empresas e também aprimorar minhas habilidades, periodicamente busco por falhas em aplicativos do mercado com o objetivo de realizar divulgação responsável. Centreon é uma solução de monitoramento de ativos […]
research · yokai.hakaisecurity.io
SQL Injection and XSS Vulnerability on Centreon
I’m Daniel França Lima and i’m a penetration tester Jr and vulnerability researcher at Hakai Offensive Security. In order to help the hacking community, companies and also improve my skills, I periodically look for flaws in market applications with the goal of achieving responsible disclosure. Centreon is a system and network asset monitoring solution based […]
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
Back