PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PimpMyBurp #7: How HaE Burp Suite extension can help you in your daily hunting session

yeswehack.com | vulnerability | #bug-bounty | #pentesting | #burp-suite | #web-security | #tools | #regex | #hae | #pimpmyburp
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How the HaE (Highlighter and Extractor) Burp Suite extension uses regex rules to collect, categorise and highlight requests and responses, helping hunters flag vulnerable patterns and errors.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
vulnerability · portswigger.net
Backslash Powered Scanning: hunting unknown vulnerability classes
James Kettle presents backslash-powered scanning: an approach that finds known and unknown classes of server-side injection flaws with a tiny network footprint, tested across thousands of sites.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
Back