3 ms·
There are good burp alternatives too :)
by _pdp_ 8y ago
There are good burp alternatives too :)
- tptacek 8y agoThere definitely are! Your stuff included! Burp is just the industry standard.
- sandGorgon 8y agoSo is it "fix whatever Burp points out" ? Is that a good first step ? Especially for api endpoints (versus websites)
- tptacek 8y agoYou'd ideally want a dev process where all your developers were capable of conducting integration test runs with Burp; you'd probably set up a checklist of authz tests, and set up some custom wordlists for Intruder for database, filesystem, and DOM injection vectors.
- sandGorgon 8y agoThanks. This was a superuseful suggestion. I can now Google a lot of stuff on my own.
- deleted 8y ago[deleted]