AntSwig
@antswig.bsky.social
AntSwig was an ordinary ant until he was bitten by a radioactive Web Security software at which point he was transformed into AntSwig! AntSwig has no powers... All opinions are my own... Blah blah blah... Disclaimer etc...
@jameskettle.com and @tib3rius.bsky.social. Name a better pairing for a cybersecurity interview... I'll wait...
James Kettle@jameskettle.com · last yr.Interested in pushing hacking techniques beyond the state of the art, or breaking into full-time security research? I recently had a great chat with Tib3rius on the topic! Watch it here: www.youtube.com/watch?v=S64E...
This a a great Q&A from a master of his craft. I especially love the little easter egg just after the question @ 26:10! #websecurity #burpsuite
James Kettle@jameskettle.com · last yr.The recording of my recent AMA with the Burp Suite Discord community has just landed on YouTube! 40 minutes of unscripted Q&A on security research, AI, and Burp Suite: youtu.be/mgmUZ9odkvU
TIL in the latest Early Adopter version (aka 2025.5), extensions don't need to manage their own settings panel anymore, as they can simply add entries to "Settings > Tools > Extensions" 🤯 And to be honest, I find that awesome! 💎
I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓
As a representative for bugs everywhere, I must say that I am more scared than ever that AI is now also hunting me! Make sure to check out John's video to better understand the threat!
John Hammond@johnhammond.bsky.social · last yr.I got a chance to try out @Burp_Suite Burp AI, and it's... honestly really cool 😅 Video showcase where we cruise through a web app scan, crawl and audit, and it rips through findings including an explicit UNION SQL injection vulnerability and more 🤩 youtu.be/v-McepNOrTQ
If you also missed the new button like me, quickly see your Burp AI credits in the Burp UI at the bottom right:
Check out the @portswigger.net Discord server for James's AMA! It's bound to be insightful, informative and in... Erm... Invincible? ... Couldn't think of a third "in" word... discord.gg/portswigger
Join the PortSwigger Discord Server!
A place where security professionals, hobbyists, and passionate Burp users can hang out, chat, and collaborate. | 9713 members
discord.gg
James Kettle@jameskettle.com · last yr.Got questions about using AI in security research? I'll be doing a live AMA on the topic tomorrow at 1500 UTC. Submit your questions here: app.sli.do/event/ou8cmS... Attend via Discord: discord.com/invite/ports...
I know Thomas from the PortSwigger Discord server, where they're always extremely helpful and knowledgeable. As such, I'm sure this is one not to be missed!
Tom Stacey@t0xodile.com · last yr.Excited to announce I will be speaking at BSides Exeter this year! If you like web research, novel detection techniques and nerding out about desync attacks, feel free to come and listen!
Pink Draconian (who apparently isn't on Bluesky 😢) published a walk-through of the "Damn Vulnerable RESTaurant" app The video contains some pretty good tips related to Burp Suite, give it a look! youtu.be/CdVTG3aWTew?...
Damn Vulnerable RESTaurant - API hacking
YouTube video by PinkDraconian
youtu.be
This is bound to be a banger! Make sure to check it out if you can!
James Kettle@jameskettle.com · last yr.I'm excited to announce I'll be delivering the keynote at RomHack this September! I can't share the title just yet but it's going to be a good one. See you in Rome! romhack.io
This is the most exciting thing I've seen since Jimmy McGill dropped that ice-cream cone in Better Call Saul... Because I am an ant... 👀
Burp Suite@burpsuite.bsky.social · 2y agoWelcome to the next evolution of Burp Suite… 🚀 #BurpAI
Gareth's work is anything but "normal", but if you want to see some of the abnormally good updates to "Shazza", check out his post!
Gareth Heyes@garethheyes.co.uk · 2y agoI've updated the unicode table to include unicode overflow, normalization, case transformation and reverse normalization. Reverse normalization will show you which characters transform into the ASCII character selected. That was really fun :D shazzer.co.uk/unicode-tabl...
If you arr at Black Hat Europe, ye won't want ta be missin' out on this exclusive booty!
James Kettle@jameskettle.com · 2y agoI'll be at Black Hat Europe next week - let me know if you'd like to meet up... or just collect one of these highly exclusive desync-themed tshirts #BHEU
Hot Diggity Dog, that's a nice sneaky peaky! (Ignore that the end is misaligned on row 14).
Burp Suite@burpsuite.bsky.social · 2y ago
I used to think that "Listen to the whispers" was just what the voices in my head used to tell me, but @jameskettle.com's talk is a much better use of that phrase. I'm not the most technical person, but I was fascinated by the techniques James talked through in this presentation!
PortSwigger@portswigger.net · 2y agoIn case you missed it, @albinowax.bsky.social 's amazing talk "Listen to the Whispers: Web Timing Attacks that Actually Work" from Def Con is now available to watch on YouTube. www.youtube.com/watch?v=zOPj...
If you like Cybersecurity content on #Twitch then consider checking out @tib3rius.bsky.social, and if you like what you see give him a follow! He's like nice looking mushrooms... A pretty fun guy! (Pretty funghi). ... I'll see myself out again!
Tib3rius@tib3rius.bsky.social · 2y agoI'm 90 followers away from 10k on my Twitch. If you enjoy watching live streams, consider giving me a follow! I stream Cybersecurity content most Mondays & Wednesdays! We'll do a special stream once we hit 10k! twitch.tv/0xTib3rius
We've streamlined setting up scans in Burp Suite Professional - check it out! 🚀 #BurpSuite #appsec #pentesting
What do you call a padlock for spiders? Web security! ... I'll see myself out...