PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Elevate your testing with Burp AI: watch Clint Gibler’s exclusive interview with PortSwigger’s Dafydd Stuttard and James Kettle

portswigger.net | blog | #ai-security | #interview | #portswigger | #burp-ai | #explore-issue | #shadow-repeater | #clint-gibler
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Clint Gibler interviews Dafydd Stuttard and James Kettle on Burp AI, featuring live demos of Explore Issue autonomously building a SQL injection PoC and the Shadow Repeater extension.
Published
Collected

Related coverage

blog · portswigger.net
Welcome to the next generation of Burp Suite: elevate your testing with Burp AI
Burp Suite Professional 2025.2 introduces Burp AI with five features: Explore Issue, Explainer, AI-generated recorded logins, access control false positive reduction and AI-powered extensibility.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · portswigger.net
Burp AT: What's new since Black Hat
Launch Burp AT now Find out more about Burp AT Since we launched Burp AT at Black Hat USA, it's been great to s
blog · portswigger.net
Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
Back