We're excited to announce we're partnering with SAP to strengthen the security of their cloud services. Burp Suite’s leading DAST technology delivers automated, precise security testing, helping SAP meet their security needs at scale. Read more 👉 bit.ly/41yMgCc

🏆 The results are in - The 10 Web Hacking Techniques you can’t afford to ignore. This research has the potential to influence security tools, inspire new defenses, and inform best practices across the industry. Check them out below 👇

Work smarter, not harder! Don’t miss this latest episode of Across the Pondcast from @tib3rius.bsky.social & @swiftsecur.bsky.social and pick up some handy tips for using custom testing tools.👇

Tonight at 4pm GMT (12pm EDT), join @0xTib3rius for their Big Bambda Boom talk, which explores how you can start using Bambdas to assist your web app testing. Join the PortSwigger Discord to register for this exciting event 👇 discord.com/invite/ports...

Join the PortSwigger Discord Server!

A place where security professionals, hobbyists, and passionate Burp users can hang out, chat, and collaborate. | 6945 members

discord.com

Modify Burp’s traffic with CSTC 👨‍🍳 Built for experts, CSTC enables you to define recipes that are applied to incoming or outgoing HTTP requests/responses automatically. Download “CSTC, Modular HTTP Manipulator” in the BApp store today!

Wow, what a year 2024 has been! The Burp Suite community has achieved so much, from completing Academy labs and passing the Burp Certification, to running events on the PortSwigger Discord. Let’s take a look at what you’ve been up to this year… 👀

In case you missed it, @albinowax.bsky.social 's amazing talk "Listen to the Whispers: Web Timing Attacks that Actually Work" from Def Con is now available to watch on YouTube. www.youtube.com/watch?v=zOPj...

DEF CON 32 - Listen to the Whispers: Web Timing Attacks that Actually Work - James Kettle

YouTube video by DEFCONConference

youtube.com

Hello world