The XSS Rat
CWAP · Module 13 — Automation & Tooling

Burp power features and writing your own check

Animated, step-by-step: match-and-replace, session macros, Intruder attack types, candidate generators — then the forty lines of Python for the check no tool ships.
Module 13Burp SuiteCustom checksRate discipline

◤ Attacker workstation

🐀
you
idle

◤ On the wire

◤ Server

key material
waiting
attacker
server
hunter@cwap — bash
0:00 / 0:00 step 1 / 1