Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Burp, Collaborate, and Listen: A Pentester Reviews the Latest Burp Suite Addition

bishopfox.com | blog | #pentesting | #burp-suite | #tools | #collaborator | #blind-injection

Summary

A pentester's review of Burp Suite's Collaborator: how out-of-band HTTP and DNS callbacks surface super-blind injection points, when to host a private server, and VPS trade-offs.
Published
Collected

original ↗

Related coverage

  1. How to Set Up Your Hardware Lab (bishopfox.com)
  2. The Pen Testing Tools We’re Thankful for This Season (bishopfox.com)
  3. How We Can Stop Email Spoofing (bishopfox.com)
  4. A Guide to Choosing the Right VPN (bishopfox.com)
  5. Quick Intro to NotInMyBackYard Diggity (bishopfox.com)
  6. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)

back