PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing HTTP Anomaly Rank

portswigger.net | research | #ai-security | #burp-suite | #web-security | #tooling | #http | #turbo-intruder | #anomaly-detection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

James Kettle introduces HTTP Anomaly Rank, an algorithm that surfaces the most interesting HTTP responses from huge result sets. It ships in Turbo Intruder and Burp Suite's 2025.10 API.
Published
Collected

Related coverage

research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
blog · vercel.com
The three types of AI bot traffic and how to handle them
Bots account for over 20% of all web traffic. A quarter of that is AI crawlers alone. But not all bots are bad. Some are key to how your site gets discovered. Learn how AI bots shape visibility and what happens if you block them.
blog · netspi.com
Introducing Burp Extractor
Will Strei introduces Burp Extractor, a Burp Suite extension that extracts dynamic values like anti-CSRF tokens from responses via regex and reinserts them into requests, a generalized cookie jar.
blog · netspi.com
Beautifying JSON in Burp
A native Java Burp extension that beautifies JSON in place, letting testers read and live-edit nested API responses without Jython, with edits synced back to the raw request tab.
research · portswigger.net
WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine
WebSocket Turbo Intruder brings Turbo Intruder's fast engine to WebSocket testing, fuzzing messages at high speed with smart filtering to uncover races, prototype pollution and access-control bugs.
Back