Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Why spend time manually converting JSON to XML to test for XXE? Just ask Burp AI in Repeater: it handles the transformation and delivers the exploit. Ben Sadeghipour demonstrates this massive shortcut for finding complex, overlooked bugs. 👇

Burp_Suite's profile picture

Burp Suite

136,128 subscribers

17,695 Aufrufe • vor 8 Monaten •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇
1:12

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

Web Security Academy

11,029 Aufrufe • vor 8 Monaten

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 Aufrufe • vor 8 Monaten

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇
0:28

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Burp Suite

12,124 Aufrufe • vor 5 Monaten

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇
0:56

Can Burp AI hack a website? Régnier dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations. Watch her video now👇

Burp Suite

12,147 Aufrufe • vor 7 Monaten

We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.
0:28

We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.

Gareth Heyes \u2028

42,352 Aufrufe • vor 1 Jahr

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳
5:25

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

Patriotic 🇬🇧 Nation

68,308 Aufrufe • vor 1 Jahr

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats
0:46

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

LM

21,448 Aufrufe • vor 1 Jahr

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec
0:28

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,622 Aufrufe • vor 1 Jahr

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes
0:43

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

MAX

50,320 Aufrufe • vor 4 Monaten

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):
1:35

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

Brendan Jowett

1,168,150 Aufrufe • vor 1 Jahr

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually
0:25

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

Melvyn • Builder

31,845 Aufrufe • vor 5 Monaten

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇
2:04

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

Murray Frost

124,324 Aufrufe • vor 1 Jahr

"It was about finding the right team for me." Jack reveals why it was time to swap the Blades for the Blues. 🔵
0:53

"It was about finding the right team for me." Jack reveals why it was time to swap the Blades for the Blues. 🔵

Birmingham City FC

37,586 Aufrufe • vor 9 Monaten

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open
2:36

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

War Correspondent

162,999 Aufrufe • vor 1 Jahr

09.11.2001 Ask yourself this: why are you just seeing this footage for the first time in 2025?
4:24

09.11.2001 Ask yourself this: why are you just seeing this footage for the first time in 2025?

E

6,835,212 Aufrufe • vor 1 Jahr

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.
2:39

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Y Combinator

102,573 Aufrufe • vor 2 Monaten

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.
1:02

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Acyn

19,979 Aufrufe • vor 3 Monaten

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇
0:24

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Firecrawl

19,005 Aufrufe • vor 5 Monaten

Sneak Preview of the BskDL. I’m going to be sending out this shortcut for testing soon. If you want to test it please DM me.
0:21

Sneak Preview of the BskDL. I’m going to be sending out this shortcut for testing soon. If you want to test it please DM me.

saif.dev 👨🏻‍💻

50,632 Aufrufe • vor 1 Jahr

here's how to do it with AI in 3 minutes: - upload monk photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - infinitetalk for lipsync done, this is how you make content that gains millions of followers in minutes
1:01

here's how to do it with AI in 3 minutes: - upload monk photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - infinitetalk for lipsync done, this is how you make content that gains millions of followers in minutes

MAX

815,079 Aufrufe • vor 5 Monaten