The post How To Hack Web Applications in 2022: Part 2 appeared first on Detectify Labs.
Before yesterdayWeb App
Module disclosures now available for hackers on Detectify Crowdsource
28 July 2022 at 10:08
The post Module disclosures now available for hackers on Detectify Crowdsource appeared first on Detectify Labs.
Burp Suite certification: a year in review
27 July 2022 at 08:56
It’s been a year since we launched our Burp Suite Certified Practitioner exam, so we’ve been reflecting on some of the improvements and developments we’ve made across both our preparation materials an
Common Security Vulnerabilities in Core AWS Services: Exploitation and Mitigation
25 July 2022 at 08:56
The post Common Security Vulnerabilities in Core AWS Services: Exploitation and Mitigation appeared first on Detectify Labs.
Burp Suite roadmap update: July 2022
21 July 2022 at 13:45
With six (and a bit) months of 2022 already gone, it's time to bring you an update on the latest happenings down at Burp Towers. Find out what we've been up to, and what our plans are for the next yea
PortSwigginar - 13 July
15 July 2022 at 11:32
Thank you to those who attended our recent PortSwigginar on Burp Suite Enterprise Edition. Below is the video of the session, which included; A recap on “what’s new” within the product for those who h
Account hijacking using “dirty dancing” in sign-in OAuth-flows
6 July 2022 at 08:45
The post Account hijacking using “dirty dancing” in sign-in OAuth-flows appeared first on Detectify Labs.
New Repeater features to help you test more efficiently
5 July 2022 at 08:39
If you use Burp Suite Professional or Burp Suite Community Edition for manual security testing, then you'll be familiar with tools like Burp Repeater and Burp Intruder. They make life as a tester much
PortSwigginar - 22 June
27 June 2022 at 14:44
Thank you to those who attended our recent PortSwigginar on Burp Suite Enterprise Edition. Below is the video of the session, which included: A recap on "what's new" within the product for those who h
Hack with ‘goodfaith’ – A tool to automate and scale good faith hacking
21 June 2022 at 12:57
The post Hack with ‘goodfaith’ – A tool to automate and scale good faith hacking appeared first on Detectify Labs.
Finding client-side prototype pollution with DOM Invader
20 June 2022 at 12:37
Last year we made it significantly easier to find DOM XSS, when we introduced a brand new tool called DOM Invader. This year, we've improved DOM Invader to make finding CSPP (client-side prototype pol
How to see the impact installing BApps might have on Burp Suite
16 June 2022 at 13:50
If you've ever installed any Burp extensions from the BApp Store, you'll know that it's a great way to extend your capabilities and tailor Burp Suite to your every need. If you've not, then what are y
How to: Look for TLS private keys on Docker Hub
16 June 2022 at 07:44
The post How to: Look for TLS private keys on Docker Hub appeared first on Detectify Labs.
Launching the PortSwigginar
9 June 2022 at 23:00
Thank you to those who attended our recent PortSwigginar on Burp Suite Enterprise Edition. Below is the video of the session, which included; A recap on “what’s new” within the tool for those who have
Leveraging AWS QuickSight dashboards to visualize recon data
30 May 2022 at 13:21
The post Leveraging AWS QuickSight dashboards to visualize recon data appeared first on Detectify Labs.
Gin and Juice Shop: put your scanner to the test
16 May 2022 at 13:44
"Word". We heard that a lot of you have been having problems finding a truly dope vulnerable web application to wave your scanner at. As makers of the web's OG vulnerability scanner, we couldn't be le
How To Hack Web Applications in 2022: Part 1
16 May 2022 at 13:13
The post How To Hack Web Applications in 2022: Part 1 appeared first on Detectify Labs.
New tool release: Discovering the origin host to bypass web application firewalls
9 May 2022 at 08:29
The post New tool release: Discovering the origin host to bypass web application firewalls appeared first on Detectify Labs.
How to “winterize” and secure your eCommerce website for the holidays
17 November 2020 at 12:49
The post How to “winterize” and secure your eCommerce website for the holidays appeared first on Detectify Blog.
