TGViewer
网络安全笔记 网络安全笔记 @tsecrecord · 7.95K subscribers
Post #1497 2.42K

Forwarded from HomeBot

🚨 安全资讯：

Extending Burp Suite for fun and profit – The Montoya way – Part 9 - HN Security

【📰 文章类型】：技术教程/工具扩展指南
【⚠️ 威胁级别】：低
【⚙️ 技术摘要】：Burp Suite 2025.9.5 引入“自定义扫描检查”功能，支持使用类Java语言编写扫描规则，替代BChecks，具备更强功能（如响应时间、字节数组操作），可直接在插件界面开发、测试、管理，适用于非复杂场景。
【🎯 潜在影响】：提升渗透测试效率，降低扩展开发门槛，但需防范恶意插件滥用或误配置导致的误报/漏报风险。

查看原文
HN Security HN Security - Extending Burp Suite for fun and profit – The Montoya way – Part 9 - Articles A comprehensive guide on extending Burp Scanner with custom scan checks.
Open in Telegram All posts from @tsecrecord
More from @tsecrecord
  1. Sep 27, 2026一款本地数字取证/事件响应辅助工具。该浏览器扩展程序会捕获您调查过程中的屏幕截图（例如 Velociraptor、EDR/SIEM 控制面板、Security Onion、Splu…
  2. Sep 20, 2026https://opsectechniques.com/
  3. Aug 27, 2026https://github.com/hypnguyen1209/log4j2-rce
  4. Aug 15, 2026https://telegra.ph/weekly-408-08-14
  5. Jul 6, 2026The Long Watch — Scenario Select https://mr-r3b00t.github.io/org_cyber_attack_sim/
  6. Jun 24, 2026https://techblog.zozo.com/entry/soc-claude-agent#SOC-Agent%E3%81%AE%E8%A8%AD%E8%A8%88
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →