Hi [[ session.user.profile.firstName ]]

Occupy Burp Suite: Letting the 99% Know What the 1%-ers are Taking Advantage Of

Burp Suite has created a name for itself as arguably one of the go-to weapons of choice for web application pentesters, but one of its best features is consistently being ignored: the ability to append or modify functionality through the use of burp extensions. Extensions as a feature have introduced users to numerous possibilities, and have given opportunities to easily develop functionality that's necessary to complete require test related tasks. With all that is available through Burp extensibility, why have we not seen its users contribute functionality to the same degree as community driven projects such as MetaSploit or the Nmap Scriptability Engine? In this presentation Joseph Tartaro will present a campaign that focuses on building demand, support and an overall desire around the creation of Burp extensions in the hope of bringing extensibility to the forefront of web application testing. Tartaro wil begin by outlining the current demand, capabilities, and limitations while introducing up to a dozen extensions they created that presently utilize all current accessible fun ctionality within th eextensibility suite. Along with the release of these extensions, a campaign (a call to arms, if you will) will be presented to organize and develop an extension community that documents tool primers, lessons learned, and tips/tricks, along with hosting extensions and tools catered to Burp. Tartaro will showcase the benefits of his approach which will include increased efficiency and a simplified way to write new scripts. During development of this talk, Tartaro took into consideration that re-use is a key factor and development techniques were used to help test user adaptation. Something learned isn't research until it's shared - the plan is to put this statement into practice, utilizing BSides as a perfect tool to help collect data, convey interests, and share results.
Recorded Aug 17 2012 40 mins
Your place is confirmed,
we'll send you email reminders
Presented by
Joseph Tartaro
Presentation preview: Occupy Burp Suite: Letting the 99% Know What the 1%-ers are Taking Advantage Of

Network with like-minded attendees

  • [[ session.user.profile.displayName ]]
    Add a photo
    • [[ session.user.profile.displayName ]]
    • [[ session.user.profile.jobTitle ]]
    • [[ session.user.profile.companyName ]]
    • [[ userProfileTemplateHelper.getLocation(session.user.profile) ]]
  • [[ card.displayName ]]
    • [[ card.displayName ]]
    • [[ card.jobTitle ]]
    • [[ card.companyName ]]
    • [[ userProfileTemplateHelper.getLocation(card) ]]
  • Channel
  • Channel profile
Presentations from the BSides Events and Beyond
Presentations from the BSides Events and Beyond

Embed in website or blog

Successfully added emails: 0
Remove all
  • Title: Occupy Burp Suite: Letting the 99% Know What the 1%-ers are Taking Advantage Of
  • Live at: Aug 17 2012 9:00 pm
  • Presented by: Joseph Tartaro
  • From:
Your email has been sent.
or close