PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Smart Automation With Burp Suite

yeswehack.com | blog | #burp-suite | #automation | #web-security | #tutorial | #bchecks | #scanning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Tutorial on smart automation in Burp Suite: combining BChecks, Burp Bounty, Logger++ and built-in passive scanning and crawling into a time-saving workflow — while manual testing still matters.
Published
Collected

Related coverage

blog · portswigger.net
BChecks: Houston, we have a solution!
PortSwigger launches BChecks in beta for Burp Suite Professional, a scripting language with conditional logic, regex, raw HTTP requests, and Collaborator support for custom scan checks.
blog · netspi.com
Macros Demystified
A three-part video series demystifies Burp Suite macros: capturing dynamic values like CSRF tokens, chaining sessions, and automating complex multi-request scenarios, with practice labs included.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
Back