--- title: "#burpsuite articles | Hashnode" description: "Explore 131 articles tagged #burpsuite on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/burpsuite" --- Tag # #burpsuite 131 posts · 21 followers [Hareeshwar N K](https://hashnode.com/@H4x0rGh0st) · [Oct 30](https://hashnode.com/posts/when-the-database-talks-back-blind-sqli-data-exfiltration-over-dns/6ae41ee471b5a8dbb4e7f2f0) ### [When the Database Talks Back: Blind SQLi Data Exfiltration Over DNS](https://hareeshwarnk.hashnode.dev/when-the-database-talks-back-blind-sqli-data-exfiltration-over-dns?utm_source=hashnode&utm_medium=feed) A PortSwigger Practitioner lab where a quoted string literal blocked my first payload, and rebuilding the concatenation at SQL level turned the admin password into a DNS label. 6 min read · [hareeshwarnk.hashnode.dev](https://hareeshwarnk.hashnode.dev/when-the-database-talks-back-blind-sqli-data-exfiltration-over-dns?utm_source=hashnode&utm_medium=feed) [Jebitok](https://hashnode.com/@w1t3r) · [Sep 22](https://hashnode.com/posts/http-request-smuggling-tryhackme/6ab23067c3008b3a30c5b743) ### [HTTP Request Smuggling (TryHackMe)](https://www.sharonjebitok.com/http-request-smuggling-tryhackme?utm_source=hashnode&utm_medium=feed) Link to the challenge on TryHackMe: HTTP Request Smuggling Introduction Introduction HTTP Request Smuggling is a vulnerability that arises when there are mismatches in different web infrastructure com 20 min read · [sharonjebitok.com](https://www.sharonjebitok.com/http-request-smuggling-tryhackme?utm_source=hashnode&utm_medium=feed) [0x8r41nr07](https://hashnode.com/@0x8r41nr07) · [Sep 2](https://hashnode.com/posts/everyone-has-an-agenda/6a97d317427c74e319e42299) ### [Everyone Has an Agenda](https://braindump.0x8r41nr07.xyz/everyone-has-an-agenda?utm_source=hashnode&utm_medium=feed) Thirty years of client meetings taught me to trust my gut. Burp Suite just confirmed it. 5 min read · [braindump.0x8r41nr07.xyz](https://braindump.0x8r41nr07.xyz/everyone-has-an-agenda?utm_source=hashnode&utm_medium=feed) [Kaustubh Rai](https://hashnode.com/@KaustubhRai) · [Aug 20](https://hashnode.com/posts/the-bapp-that-almost-worked-building-curl2repeater/6a86a00b55fcfb1ad8e61cee) ### [The BApp That Almost Worked: Building curl2repeater 🔧](https://raikaustubh.com/the-bapp-that-almost-worked-building-curl2repeater?utm_source=hashnode&utm_medium=feed) There's always that one extension everyone has installed and nobody's actually checked. For BurpSuite, mine was Paste cURL to Repeater. I'd had it installed for months before I bothered actually looki 5 min read · [raikaustubh.com](https://raikaustubh.com/the-bapp-that-almost-worked-building-curl2repeater?utm_source=hashnode&utm_medium=feed) [kareem Mohamed](https://hashnode.com/@kmbkareem) · [Aug 10](https://hashnode.com/posts/towel-on-the-sunbed-a-walkthrough-of-thm-hacker-holidays-day-8/6a79bb793e2ae7727fac580e) ### [Towel on the Sunbed: A walkthrough of THM Hacker Holidays - Day 8](https://kmb.hashnode.dev/towel-on-the-sunbed-a-walkthrough-of-thm-hacker-holidays-day-8?utm_source=hashnode&utm_medium=feed) Step-by-step THM Hacker Holidays Day 8 walkthrough. Exploit race conditions and business logic flaw using Burp Suite with 0xY0K4\_CL4W. 3 min read · [kmb.hashnode.dev](https://kmb.hashnode.dev/towel-on-the-sunbed-a-walkthrough-of-thm-hacker-holidays-day-8?utm_source=hashnode&utm_medium=feed) [Priti Pawar](https://hashnode.com/@pritip) · [Aug 4](https://hashnode.com/posts/portswigger-broke-10-things-this-week/6a713de36ae30d873c542885) ### [PortSwigger: Broke 10 things this week](https://portswiggerlabs.hashnode.dev/portswigger-broke-10-things-this-week?utm_source=hashnode&utm_medium=feed) I'm a third-year B.Tech CSIT student, and this week I started working through PortSwigger's Web Security Academy to explore offensive security hands-on. I'm documenting each lab here — the vulnerabili 23 min read · [portswiggerlabs.hashnode.dev](https://portswiggerlabs.hashnode.dev/portswigger-broke-10-things-this-week?utm_source=hashnode&utm_medium=feed) [Vimal Mudalagi](https://hashnode.com/@vimalmudalagi) · [Jul 7](https://hashnode.com/posts/learning-web-security-1-broken-access-control-owasp-top-10-1-beginner-s-guide/6a4d0305ab2992a7aae06ac4) ### [Learning Web Security #1: Broken Access Control (OWASP Top 10 #1 - Beginner's Guide)](https://vimalmudalagi.hashnode.dev/learning-web-security-1-broken-access-control-owasp-top-10-1-beginner-s-guide?utm_source=hashnode&utm_medium=feed) Disclaimer: I'm currently learning web security through PortSwigger Web Security Academy. These are my beginner-friendly notes rewritten as a blog to help reinforce my understanding. If you're just st 9 min read · [vimalmudalagi.hashnode.dev](https://vimalmudalagi.hashnode.dev/learning-web-security-1-broken-access-control-owasp-top-10-1-beginner-s-guide?utm_source=hashnode&utm_medium=feed) [Abhinav](https://hashnode.com/@abiinv) · [Jul 6](https://hashnode.com/posts/lab-01-ssrf-via-openid-dynamic-client-registration/6a4bb7847e00dc9d6895782a) ### [LAB #01 SSRF via OpenID dynamic client registration](https://log.page0.dev/lab-01-ssrf-via-openid-dynamic-client-registration?utm_source=hashnode&utm_medium=feed) Understanding OpenID Dynamic Client Registration Abuse 4 min read · [log.page0.dev](https://log.page0.dev/lab-01-ssrf-via-openid-dynamic-client-registration?utm_source=hashnode&utm_medium=feed) [Solomon Achugwoh](https://hashnode.com/@Securedtips) · [May 23](https://hashnode.com/posts/integrating-burp-suite-with-claude-for-security-testing/6a12207c1a3cf7bffc5aa312) ### [Integrating Burp Suite with Claude for Security Testing](https://securedtips.hashnode.dev/integrating-burp-suite-with-claude-for-security-testing?utm_source=hashnode&utm_medium=feed) MCP server which acts as the communication bridge between Burp Suite and AI assistants like Claude Desktop. 5 min read · [securedtips.hashnode.dev](https://securedtips.hashnode.dev/integrating-burp-suite-with-claude-for-security-testing?utm_source=hashnode&utm_medium=feed) [Amal PK](https://hashnode.com/@amalpk) · [May 8](https://hashnode.com/posts/android-burp-proxy-setup/69fd810c9f93a850a474c0d3) ### [How to Set Up Burp Suite Proxy on Rooted Android with AlwaysTrustUserCerts (Magisk)](https://blog.amalpk.in/android-burp-proxy-setup?utm_source=hashnode&utm_medium=feed) Configure Burp Suite proxy on rooted Android with Magisk's AlwaysTrustUserCerts. Includes certificate conversion (DER→PEM) and install. 4 min read · [blog.amalpk.in](https://blog.amalpk.in/android-burp-proxy-setup?utm_source=hashnode&utm_medium=feed)