A PoC using Burp Bambdas to show its simplicity for Quick Wins

Comments (1)

laserspeed · 18h ago

Bambdas are small pieces of Java that can be written to perform a wide variety of tasks within Burp, PortSwigger's HTTP(s) Proxy.

The article shows how to rely on Bambdas to identify sensitive data across multi-step flows or processes, very often found in Webapps.

Show HN: Play Flash Games on Mobile with Ruffle Virtual Keyboard (github.com)

Memories of a litigator on the Hulk Hogan vs. Gawker case (twitter.com)

We Gained Full Access to a $100M Zero-Trust Startup (zero-defense.com)

Trump Administration Plans Changes to Skilled Worker Visas and Citizenship Tests (nytimes.com)

Learning About GPUs Through Measuring Memory Bandwidth (evolvebenchmark.com)

Nexus – Lovable for Desktop Apps (github.com)

LaraCopilot – AI Powered Laravel Copilot (laracopilot.com)

First release candidate of systemd 258 is here (theregister.com)

What if Left-Right and Seq-Lock had a baby? (github.com)

AI as Profoundly Abnormal Technology (blog.ai-futures.org)

Playtron's Linux-Based GameOS Hits the Road with 1.0 (boilingsteam.com)

Why I Do Programming (esafev.com)

Show HN: I loaded all Paul Grahams essays into an AI Avatar (humanconscious.com)

NASA TRACERS mission contains D code (forum.dlang.org)

Tesla dumped 75% of its Bitcoin at one of the worst times, losing billions (cnbc.com)

Science is winning the Tour de France (msn.com)

Textreme – A Juicy Text Processor (ash-k.itch.io)

Three HTTP versions later, forms are still a mess (yorickpeterse.com)

Middleware for humans – run this code every time you pass through a door (old.reddit.com)

Crew Members Are Hurt as Southwest Plane Plunges Abruptly After Takeoff (nytimes.com)

The Substack AI Report (on.substack.com)

Where People Go When They Want to Hack You [video] (youtube.com)

How Stack Overflow is innovating to keep up with AI disruption (leaddev.com)

A colonial hangover or a leg-up? India grapples with the appeal of English (cnn.com)

Nvidia's AI said to 'update' to old drivers and that I wasn't gaming (I was) (pcgamer.com)

Object deserialization attacks using Ruby's Oj JSON parser (hezmatt.org)

First Open source cognition layer for your shell

Users claim Discord's age verification can be tricked with video game characters (thepinknews.com)

The Hack That Made China a Superpower: Operation Shady Rat [video] (youtube.com)

China behind global hack involving multiple US agencies (politico.com)

Show HN: A custom ESP32-S3 board for battery powered WiFi enabled plant watering (github.com)

A grand tour through the essays of Lewis H. Lapham (laphamsquarterly.org)

Cara Membatalkan Pinjaman Lazada Lazbon (instagram.com)

Jungian Archetypes (en.wikipedia.org)

Viral Language (lareviewofbooks.org)

Enabling Event‑Driven Autoscaling with the New KEDA Plugin for Headlamp (headlamp.dev)

Show HN: Sleep Blocker MCP to prevent your Mac sleep (github.com)

Split Flap (fx.hot.page)

Show HN: Generate mind maps from anything with AI (instantmind.ai)

How the NSA Hacked Huawei: Operation Shotgiant [video] (youtube.com)

Steve Yegge: “So one of my favorite things to do is give my coding agents…” (twitter.com)

Why LLMs may make monkeys out of us (comment.org)

I tested 50 AI tools in 3 months. Here's why most of them failed (toolverse.com)

The ongoing battle for vestibular accessibility on iPhone, on Android and beyond (reverttosaved.com)

What if AI made the world’s economic growth explode? (economist.com)

Stateless Persona Continuity in LLMs: Cross-Window Anchors Beyond Context Limits (github.com)

Show HN: I built a simple tool because I was tired of clunky background removers (edge-aware-ai-cut.lovable.app)

SQLx – The Rust SQL Toolkit (github.com)

CCTV Footage Captures the First-Ever Video of an Earthquake Fault in Motion (smithsonianmag.com)

AI Labubu (ailabubu.net)

A PoC using Burp Bambdas to show its simplicity for Quick Wins

Comments (1)