These last few weeks, we have selected 17 Burp Suite addons that caught our attention and certainly deserve yours. Given the wide range of available plugins, we have launched a series called “PimpMyBurp” to present our selection of Burp Suite extensions. In general any string or regular expression.Burp Suite is a great tool for bug bounty and general security testing.

Examples So, the vulnerabilities identified so far, from which you can make personalized improvements are: 1- Active Scan And others details like description, background, etc.In this section you can specify the issue that will be show if the condition match with the options specified.Response Code: you can specify one or multiple (separated by coma) HTTP response code to find string, regex or payload.Content type: you can specify one or multiple (separated by comma) content type to search the string, regex or payload.Not in cookie: if you want find if any cookie attribute is not present.Case sensitive: Only match if case sensitive.Negative match: if you want find if string, regex or payload is not present in response.Payload without encode: if you encode the payload, and you want find for original payload, you should choose this.Simple String: search for a simple string or strings.For each payload response, each string, regex or payload (depending of you choose) will be searched with the specific Grep Options.If you choose 'URL-Encode these characters' option, you can put all characters that you want encode with URL.Base64-encode: JTI2JTIzJTc4JTM2JTMxJTNiJTI2JTIzJTc4JTM2JTYzJTNiJTI2JTIzJTc4JTM2JTM1JTNiJTI2JTIzJTc4JTM3JTMyJTNiJTI2JTIzJTc4JTM3JTM0JTNiJTI2JTIzJTc4JTMyJTM4JTNiJTI2JTIzJTc4JTMzJTMxJTNiJTI2JTIzJTc4JTMyJTM5JTNi.For example, if you want encode the string alert(1), many times (in descendent order): Each payload of this secction will be sent at each entry point (Insertion points provided by the burp api).

Burp bounty pro