Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses

  PortSwigger Blog

  T1588.006 70%
  2026-04-07
• HTTP/1.1 Must Die: Conquering the 0.CL Challenge

  PortSwigger Blog

  T1588.006 74% T1190 68% T1071.001 57%
  2026-03-13
• Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test

  PortSwigger Blog

  T1190 70%
  2026-01-16
• Burp On Tour 2025: bringing the AppSec community together around the world

  PortSwigger Blog

  T1588.006 31%
  2025-12-12
• Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.

  PortSwigger Blog

  T1588.006 60%
  2025-11-14
• HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security

  PortSwigger Blog

  T1588.006 70% T1190 43%
  2025-10-09
• The future of pentesting is Human x AI, and it's already in Burp Suite Professional

  PortSwigger Blog

  T1588.006 34%
  2025-10-07
• Hacking smarter with Burp AI: NahamSec puts Burp AI to the test

  PortSwigger Blog

  T1588.002 39%
  2025-10-01
• How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities

  PortSwigger Blog

  T1190 79% T1588.002 74% T1588.006 69%
  2025-09-12
• HTTP/1.1 Must Die: What This Means for AppSec Leadership

  PortSwigger Blog

  T1190 62% T1588.006 59%
  2025-08-06
• HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPs

  PortSwigger Blog

  T1588.006 60%
  2025-08-06
• The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?

  PortSwigger Blog

  T1190 94%
  2025-08-06
• HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle

  PortSwigger Blog

  T1190 79%
  2025-08-05
• Watch the on-demand webinar: Shift left without the strain

  PortSwigger Blog

  T1588.006 63%
  2025-07-14
• PortSwigger at Black Hat & DEF CON 33

  PortSwigger Blog

  T1190 89%
  2025-07-08
• Two months of Burp AI: empowering security testers with the future of AppSec

  PortSwigger Blog

  T1588.006 74%
  2025-06-13
• PortSwigger Honored with the King's Award for Enterprise in International Trade

  PortSwigger Blog

  T1588.006 57%
  2025-05-30
• Elevate your testing with Burp AI: watch Clint Gibler’s exclusive interview with PortSwigger’s Dafydd Stuttard and James Kettle

  PortSwigger Blog

  T1588.006 48%
  2025-05-21
• Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spin

  PortSwigger Blog

  T1588.006 84%
  2025-04-30
• Document My Pentest: you hack, the AI writes it up!

  PortSwigger Research

  T1588.006 39%
  2025-04-23
• Shadow Repeater:AI-enhanced manual testing

  PortSwigger Research

  T1588.006 56%
  2025-02-20
• Can’t Stop, Won’t Stop Hijacking (CSWSH) WebSockets

  Black Hills InfoSec

  T1190 98% T1071.001 69% T1027.017 53%
  2024-03-21
• Unveiling the Prototype Pollution Gadgets Finder

  Doyensec

  T1090.002 74%
  2024-02-16
• Blind CSS Exfiltration: exfiltrate unknown web pages

  PortSwigger Research

  T1041 96% T1588.006 43%
  2023-12-05
• Dependency Confusion

  Doyensec

  T1195.001 97% T1587 59%
  2022-07-20