PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

YesWeBurp 2.0 : A new version of our Burp Suite extension is available

yeswehack.com | blog | #bug-bounty | #burp-suite | #extensions | #tooling | #yeswehack | #kotlin
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

YesWeBurp 2.0 reworks YesWeHack's Burp Suite extension in Kotlin: fetch public and private programs, review rules and scopes, and add scope or User-Agent rules to Burp in one click.
Published
Collected

Related coverage

blog · yeswehack.com
How-To: Learn how to write a Burp Suite extension in Kotlin – Setting up
First episode of a tutorial on writing Burp Suite extensions in Kotlin: setting up IntelliJ IDEA and the Burp extender API via Maven, building a Hello World extension, and loading the JAR.
blog · netspi.com
Introducing Burp Extractor
Will Strei introduces Burp Extractor, a Burp Suite extension that extracts dynamic values like anti-CSRF tokens from responses via regex and reinserts them into requests, a generalized cookie jar.
blog · netspi.com
Beautifying JSON in Burp
A native Java Burp extension that beautifies JSON in place, letting testers read and live-edit nested API responses without Jython, with edits synced back to the raw request tab.
blog · netspi.com
Debugging Burp Extensions
A tutorial on setting up Java remote debugging for Burp extensions, walking through attaching an IDE debugger to Burp to troubleshoot custom extension code.
research · portswigger.net
Adapting Burp extensions for tailored pentesting
James Kettle shows how to customize open-source Burp extensions for tailored pentesting, modifying Collaborator Everywhere to inject SSRF-prone parameters found via Bugcrowd's HUNT.
blog · yeswehack.com
Codex vs Claude Code vs Gemini CLI: Where each AI agent fits in your Bug Bounty workflow
We put Claude Code, Codex and Gemini CLI through PortSwigger labs covering discovery, exploitation and validation. See how each performed.
Back