PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Document My Pentest: you hack, the AI writes it up!

portswigger.net | research | #ai-security | #pentesting | #burp-suite | #automation | #reporting | #tooling
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Document My Pentest is an open-source Burp extension that watches your requests in real time, understands what you're probing and auto-builds a structured findings record AI can turn into a report.
Published
Collected

Related coverage

blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · netspi.com
How to Streamline Pentest Data to Security Orchestration
NetSPI offers three best practices for making third-party pentest data compatible with security orchestration, since static PDF reports and custom formats hinder automated correlation and remediation.
blog · netspi.com
Introducing Burp Extractor
Will Strei introduces Burp Extractor, a Burp Suite extension that extracts dynamic values like anti-CSRF tokens from responses via regex and reinserts them into requests, a generalized cookie jar.
blog · netspi.com
Beautifying JSON in Burp
A native Java Burp extension that beautifies JSON in place, letting testers read and live-edit nested API responses without Jython, with edits synced back to the raw request tab.
research · portswigger.net
Practical Web Cache Poisoning
James Kettle's whitepaper shows how to turn web caches into exploit delivery systems, hijacking JavaScript and poisoning responses across popular sites, plus defenses and open source tooling.
Back