ExtraBurpSuiteStuff.md

BurpSuite shortcuts, tips, and tricks

See PortSwigger's YouTube Channel for a complete list

Some quick links to a few specific how-to videos by PortSwigger

Beginner/basics

• Burp Suite Essentials Playlist

Scan related

• Automated content discovery with Burp Suite
• Complementing your manual testing with Burp Scanner
• Identifying which parts of a token impact the response
• Burp Suite Shorts | BCheck Testing Tool

• Video coming soon:

• Targeted Scanning - Finding vulnerabilities quickly

Intruder related

• Brute-forcing passwords with Burp Suite
• Discovering a race condition vulnerability in Gitlab with the single-packet attack
• 2FA broken logic lab

Working with specific web tech: HTTP/2, GraphQL, JWTs, etc..

• Working with JWTs in Burp Suite
• Burp Suite Shorts | GraphQL Introspection
• Working with HTTP/2 in Burp Suite
• Maintaining an authenticated session using Burp Suite

• Demo video in the works

• SQL Map