Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[MoBP] Can we automate? Yes we can

portswigger.net | blog | #burp-suite | #automation | #sql-injection | #xss | #vulnerability-scanning | #portswigger

Summary

Stuttard explains which bug classes scanners find reliably: client-side input flaws like XSS are highly automatable, blind server-side injection is harder, non-input issues fall to passive checks.
Published
Collected

original ↗

Related coverage

  1. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  2. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  3. From capable AI models to trusted security testing (portswigger.net)
  4. Introducing Burp AT: agentic AI, built on two decades of Burp Suite (portswigger.net)
  5. What's in a tag name? JavaScript, apparently (portswigger.net)
  6. CRLF-Powered Desync Attacks: Beheading HTTP Streams (portswigger.net)

back