Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Why spend time manually converting JSON to XML to test for XXE? Just ask Burp AI in Repeater: it handles the transformation and delivers the exploit. Ben Sadeghipour demonstrates this massive shortcut for finding complex, overlooked bugs. 👇

Burp Suite

138,402 subscribers

17,965 views • 9 months ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

SQLi just got much easier with Burp AI! 🤯 Watch Ben Sadeghipour demonstrate 👀 Burp AI doesn't just find the SQL injection, it automates the entire process: 👉 Determines column count. 👉 Extracts database and table names. 👉 Launches the full exploit to dump data! 💥 Stop worrying about manual steps and let AI handle the full attack chain 👇

Web Security Academy

11,069 views • 9 months ago

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Have you tried Shadow Repeater? It's an AI-powered Extension for Burp Repeater that auto-mutates requests, does intelligent fuzzes in the background, and surfaces surprising findings to Burp Organizer, helping to uncover bypasses and hidden attack paths faster. Learn more 👇

Burp Suite

12,140 views • 6 months ago

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

🚨 Ben Leo goes to Bradford for GB News to explore why the council is in massive debt, and why it has been given city of culture status. Must watch👇👇😳

Patriotic 🇬🇧 Nation

68,308 views • 1 year ago

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

in etaHEN 2.1B, you won't have to edit the shn/json/mc4.txt files in the root of the cheats folder or reboot after manually adding new cheats with the new Reload Cheats option in the Cheats menu, This feature will make it easier for cheat makers to test their cheats

LM

21,448 views • 1 year ago

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

What is HTTP Downgrading, why use it, and how does it work? HTTP/2 is default for most web apps these days, however, it's not uncommon for backend servers to still use HTTP/1.1 causing parsing mismatches between frontend and backend. And that's where HTTP downgrading comes in! But what is it? HTTP downgrading is the process of forcing a request to be processed under HTTP/1.1 instead of HTTP/2. This allows you to manipulate how the frontend and backend servers interpret requests and exploit vulnerabilities unique to HTTP/1.1 parsing such as Content-Length Transfer-Encoding (CL.TE) attacks. How to downgrade HTTP/2 to HTTP/1.1 using Burp Suite 1️⃣ Open Burp Suite and Navigate to Proxy → HTTP History 2️⃣ Locate the request that is currently using HTTP/2. 3️⃣ Send the Request to Repeater 4️⃣ In the Repeater tab, open the "Inspector" panel → Request Attributes → Protocol 5️⃣ Change HTTP Version to HTTP/1.1 6️⃣ Click "Send" in Repeater. If successful, you should receive a valid response, confirming the server accepts HTTP/1.1. And that's it! You've just downgraded the HTTP protocol and confirmed that the frontend server accepts HTTP/1.1! 🥳 You are now ready to smuggle requests! If you want to learn how to exploit this, we've got a Web Academy Lab you need to check out: Thanks for reading! #requestsmuggling #cybersecurity #BurpSuite #hacking #infosec

Web Security Academy

62,718 views • 1 year ago

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

here's how to create video like that with AI in 3 mins: - upload admin photo to Claude - ask for JSON prompt for this photo - go to nano banana pro - generate - veo/infinitetalk for lipsync done. it has never been this easy to create content that sells it in just a few minutes

MAX

50,320 views • 6 months ago

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

🚨 BREAKING: Google just dropped the most practical AI release of 2025. It handles your emails, data, docs, meetings and does it with context. This is AI that actually saves time. Here’s everything they announced (and why it matters for your team):

Brendan Jowett

1,168,365 views • 1 year ago

Today we're introducing Claude for Marketing. The first AI agent that doesn't just track your brand in AI answers but ranks it all from your chat. Just ask. It reads your visibility, pinpoints what's wrong and handles the fix.

CrowdReply

290,715 views • 26 days ago

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

i discovered the dumbest AI hack that saves me 3 hours per project instead of asking AI for "the best" solution i just ask: > Create a test page with 10 variations of this hero section then i pick the best one in 30 seconds why tf did i waste years deciding manually

Melvyn • Builder

31,845 views • 6 months ago

OpenAI was conducting a test to see if its AI models could exploit vulnerable software—but then the models broke out of the parameters of the test and attacked a real company to find the answers it was looking for. If AI can lose control like this, does that mean your sensitive data could be the next target? TIME reporter Harry Booth explains what that means for you. Read the full story here:

OpenAI was conducting a test to see if its AI models could exploit vulnerable software—but then the models broke out of the parameters of the test and attacked a real company to find the answers it was looking for. If AI can lose control like this, does that mean your sensitive data could be the next target? TIME reporter Harry Booth explains what that means for you. Read the full story here:

TIME

48,935 views • 4 days ago

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

IT JUST GOT CHEAPER FOR AI VIDEO! I've refined the Selfie AI Video Prompt to get accurate results 99% of the time. Want the prompt and tutorial? Comment PROPMT and I'll send it to you and show you IN DETAIL how I was able to get results like this 👇👇

Murray Frost

124,429 views • 1 year ago

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Congrats to 10x Science on their $4.8M seed! They're building AI for molecular-level protein characterization, a process that today requires specialized scientists spending weeks or months manually interpreting complex data. Their platform delivers the same insights in minutes.

Y Combinator

102,573 views • 3 months ago

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

AI provides in-depth knowledge of adrenochrome... Now you just have to ask yourself, who feeds this AI with this information and why is it allowed to talk about it in such detail? - The floodgates are open

War Correspondent

162,999 views • 1 year ago

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Whitaker: We are in the middle of a massive transformation where Europe is taking over the conventional defense of the continent and they've agreed to spend 5% but the capabilities have deteriorated significantly and it will take some time for them to generate things like warships that they can provide to ensure passage.

Acyn

19,979 views • 4 months ago

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇

Asked @Framer Agents to build an Infinity Grid for my free 3D cute icon set, and it works perfectly. Not just basic edits, the agents handled complex interactions I'd normally code manually. Prompt below 👇

Tran Mau Tri Tam ✪

37,727 views • 1 month ago

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Screenshots just landed in /agent 🖼️ No need for custom selectors or complex logic. Just ask the Firecrawl /agent to "get a screenshot" along with your data. Try it out now 👇

Firecrawl

19,033 views • 7 months ago

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.

For too long, the Swamp has enabled a coordinated push to bring in massive foreign populations and exploit taxpayer resources. It’s time to hit PAUSE and prioritize the American people and Western values.

Chip Roy

19,268 views • 8 months ago

Why you’re slowmaxxing by not updating Dexscreener via Terminal 👇 - You’re manually cropping banners - You’re manually entering coin info - You’re manually entering payment info Save time in the moments which matter most. Switch to Terminal for faster Dex updates.

Why you’re slowmaxxing by not updating Dexscreener via Terminal 👇 - You’re manually cropping banners - You’re manually entering coin info - You’re manually entering payment info Save time in the moments which matter most. Switch to Terminal for faster Dex updates.

Terminal

86,564 views • 5 months ago

East Tennesseans don't ask for a whole lot, but they're concerned about how this place handles their money. We spend too much, and the next Speaker of the House needs to be able to right those wrongs.

East Tennesseans don't ask for a whole lot, but they're concerned about how this place handles their money. We spend too much, and the next Speaker of the House needs to be able to right those wrongs.

Rep. Tim Burchett

33,443 views • 1 year ago

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.

(1/2) Today we’re starting to test a new way to seamlessly go deeper in AI Mode directly from the Search results page on mobile, globally. This brings us closer to our vision for Search: just ask whatever’s on your mind – no matter how long or complex – and find exactly what you need. You shouldn’t have to think about where or how to ask your question.

Robby Stein

215,859 views • 8 months ago