Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The history of OAST in Burp Suite

portswigger.net | blog | #burp-suite | #history | #research | #burp-collaborator | #oast | #blind-vulnerabilities

Summary

A retrospective on six years of OAST in Burp Suite: Burp Collaborator's 2015 debut made out-of-band testing accessible, powering reliable detection of blind SQLi, blind XSS and similar flaws.
Published
Collected

original ↗

Related coverage

  1. OAST (Out-of-band Application Security Testing) (portswigger.net)
  2. A modern, elastic design for Burp Collaborator server (portswigger.net)
  3. Introducing Burp Collaborator (portswigger.net)
  4. Hunting asynchronous vulnerabilities (portswigger.net)
  5. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  6. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)

back