Nicolas Grégoire

@agarri.fr

Web hacker 😈 Burp Suite Pro trainer 👨‍🏫 Maintainer of @mastering-burp.agarri.fr 🛠️

Every time I see a feature that's supposed to happen once (applying coupon codes, making withdrawals, vote counts, redeeming invites, etc.), I try Turbo Intruder. These bugs are everywhere.

I'm not here to brag, but I really think that most people have no idea of the gap between their usage of Burp Suite Pro and what is actually possible...

Once again, WarConPL was a blast 👨‍💻🍽️🍺🍸🪩🕺 I hope it wasn't the last edition, despite all the rumors 🤞 And if it was, too bad & thanks antisnatchor and h0wlu for all the fish 🥰

I'll give a single public on-site Burp Suite Pro training session this year, and it will be in RomHack 🇮🇹 (registration link in replies) And if you're not sure this course would fit you, just give a look at this recent feedback

Screenshot from X: "I dont post that much, but I do when I feel like its worth it - I have to say having taken the Burp suite Pro training by @Agarri_FR I was totally blown away. I have used burp for over 20 years and have learnt so much that will immediately help me, totally recommend the course!"

Another highly satisfied trainee 😎 👨‍🏫 If you want to take the online version of my Burp Suite course, there are two opportunities really soon (March in French, April in English) hackademy.agarri.fr/sessions And if you want to indulge your company a private session (like this company did), ping me!

Last week, I had the opportunity to attend the 4-day Mastering Burp Suite Pro training by 🛠️ Nicolas Gregoire, and it exceeded my expectations by far.

This wasn’t just another slide-driven course. Nicolas took the time to answer every question in depth and provided plenty of hands-on labs, allowing us to immediately apply what had just been explained.

Even though I’ve been working with Burp for nearly five years, I still picked up a surprising number of new techniques and practical tricks, including ways to streamline otherwise time-consuming workflows such as managing CSRF tokens both with and without session handling rules.

What I especially appreciated were the little side explorations (driven by our requests) into methodologies for leveraging features and extensions to remain stealthy or bypass WAFs. This is something that’s particularly relevant (and often underestimated) when exploiting external or internal web applications during advanced Red Team engagements.

I’m genuinely looking forward to applying this newly gained knowledge in upcoming projects, and I can wholeheartedly recommend this training to any (web) pentester who wants to level up their Burp skills.

Big thanks to Nicolas for an excellent and highly practical course!

Anna’s Archive is an incredible project aimed at preserving humanity’s knowledge and culture Their latest exploit is a near-full backup of Spotify. It includes 86 million songs, representing around 99.6% of listens 🎶 annas-archive.org/blog/backing...

Backing up Spotify

We backed up Spotify (metadata and music files). It’s distributed in bulk torrents (~300TB). It’s the world’s first “preservation archive” for music which is fully open (meaning it can easily be mirro...

annas-archive.org

Anna’s Archive is an incredible project aimed at preserving humanity’s knowledge and culture Their latest exploit is a near-full backup of Spotify. It includes 86 million songs, representing around 99.6% of listens 🎶 annas-archive.org/blog/backing...

Backing up Spotify

We backed up Spotify (metadata and music files). It’s distributed in bulk torrents (~300TB). It’s the world’s first “preservation archive” for music which is fully open (meaning it can easily be mirro...

annas-archive.org

The wait is over! Phrack 72 40th Anniversary Edition is available now. Order straight to your doorstep — the perfect gift for your fellow hacker, just in time for the holidays 🎄 No need to go to rely on the warez scene with scans anymore 😅 Order here: www.lulu.com/shop/phrack-...

Bild

Looking for a Christmas gift for yourself? #burp #training #2026 There’s 9 seats left for the English-speaking session, and 5 for the French-speaking one

Nicolas Grégoire@agarri.fr · 8mo ago

The 2026 online public sessions of my "Mastering Burp Suite Pro" course have been published 📅 - March 24th to 27th, in French 🇫🇷 - April 14th to 17th, in English 🇬🇧 hackademy.agarri.fr/2026 PS: feel free to ping me if you'd like to temporarily block a seat or are looking for a 10% coupon 🎁