Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing Burp Infiltrator

portswigger.net | blog | #burp-suite | #java | #collaborator | #iast | #burp-infiltrator | #instrumentation

Summary

Burp Infiltrator instruments Java and JVM-based applications by patching bytecode with hooks on unsafe APIs, pinging Burp Collaborator when scanner payloads reach them — an IAST-style capability.
Published
Collected

original ↗

Related coverage

  1. Behind enemy lines: bug hunting with Burp Infiltrator (portswigger.net)
  2. Hiding payloads in Java source code strings (portswigger.net)
  3. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  4. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  5. From capable AI models to trusted security testing (portswigger.net)
  6. Introducing Burp AT: agentic AI, built on two decades of Burp Suite (portswigger.net)

back