PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PimpMyBurp #6 : Generate your reports directly in Burp Suite with RIO

yeswehack.com | blog | #bug-bounty | #burp-suite | #reporting | #extensions | #tooling | #rio
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

PimpMyBurp #6 introduces RIO, a Burp Suite extension that generates markdown reports straight from Repeater, with reusable keyword-based templates exported as ready-made PoC reports.
Published
Collected

Related coverage

blog · netspi.com
Introducing Burp Extractor
Will Strei introduces Burp Extractor, a Burp Suite extension that extracts dynamic values like anti-CSRF tokens from responses via regex and reinserts them into requests, a generalized cookie jar.
blog · netspi.com
Beautifying JSON in Burp
A native Java Burp extension that beautifies JSON in place, letting testers read and live-edit nested API responses without Jython, with edits synced back to the raw request tab.
blog · netspi.com
Debugging Burp Extensions
A tutorial on setting up Java remote debugging for Burp extensions, walking through attaching an IDE debugger to Burp to troubleshoot custom extension code.
research · portswigger.net
Adapting Burp extensions for tailored pentesting
James Kettle shows how to customize open-source Burp extensions for tailored pentesting, modifying Collaborator Everywhere to inject SSRF-prone parameters found via Bugcrowd's HUNT.
blog · yeswehack.com
Tips for writing your best Bug Bounty report
Practical guidance for writing better bug bounty reports: check scope and non-qualifying lists, avoid duplicates, and write PoCs detailed enough for an unfamiliar triage team to reproduce quickly.
blog · yeswehack.com
YesWeBurp 2.0 : A new version of our Burp Suite extension is available
YesWeBurp 2.0 reworks YesWeHack's Burp Suite extension in Kotlin: fetch public and private programs, review rules and scopes, and add scope or User-Agent rules to Burp in one click.
Back