Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI
CyberMaddy在视频中探讨了AI驱动的道德黑客领域,测试了Burp AI在Repeater中发现SQL注入、XSS和不安全配置等漏洞的能力,并展示了其在漏洞发现方面的潜力与实际效果。 2025-10-22 13:15:24 Author: portswigger.net(查看原文) 阅读量:15 收藏

Amelia Coen | 22 October 2025 at 13:15 UTC


In her latest video, CyberMaddy dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure configurations.

CyberMaddy takes a side-by-side look at AI’s potential in bug bounty hunting, showing the exact prompts used to guide the LLM through vulnerability discovery - and revealing some impressive results.


Watch the video

The future of pentesting

CyberMaddy’s experiment highlights the future of AppSec with agentic capabilities in Burp AI, allowing you to add on-demand, intelligent AI assistance directly into your testing workflow.

Check out the video to learn how Burp AI can analyze, reason, and help you uncover vulnerabilities faster and more effectively.

Read more about Burp AI’s new agentic features.


Ready to get started?

Getting started with Burp AI is simple:


  1. Update to the latest version of Burp Suite Professional.
  2. If you’re new to Burp AI, enjoy 10,000 free AI credits on us.

Or explore more about Burp AI.


文章来源: https://portswigger.net/blog/can-burp-ai-hack-a-website-cybermaddy-explores-the-new-agentic-capabilities-in-burp-ai
如有侵权请联系:admin#unsafe.sh