Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Power Up Your Pen Tests: Creating Burp Suite Extensions with the New Montoya API

bishopfox.com | blog | #burp-suite | #java | #penetration-testing | #security-tools | #extensions | #montoya-api

Summary

A guide to building Burp Suite extensions with the new Montoya API: common use cases like expired-token swapping, mining proxy history to map APIs, and UI add-ons, plus lessons from a first extension.
Published
Collected

original ↗

Related coverage

  1. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  2. New Burp Suite API: we want your feedback! (portswigger.net)
  3. 7 Tools for Web Penetration Testing (netlas.io)
  4. Hiding payloads in Java source code strings (portswigger.net)
  5. Adapting Burp extensions for tailored pentesting (portswigger.net)
  6. Burp Variables: A Burp Suite Extension (bishopfox.com)

back