Introducing HUNT Data Driven Web Hacking & Manual Testing
Burp Suite extension using real-world assessment data to guide web hackers toward vulnerable parameters.
Summary
Problem Statement
Web hacking relies on pure automation, which misses significant vulnerabilities. What if attackers had powerful alerts based on real threat intelligence about where vulnerabilities occur?
HUNT Solution
HUNT is a new Burp Suite extension providing parameter-level suggestions for vulnerability discovery. Rather than generic scanning, it uses data parsed from hundreds of real-world assessments.
Data-Driven Approach
HUNT guides web hackers toward vulnerable parameter patterns for SQLi, CMDi, LFI/RFI, and more. This data-driven design ensures more thorough target assessment beyond what pure automation achieves.
Methodology Integration
The extension organizes common web hacking methodologies inside Burp Suite. Open source design allows the security community to participate in improving detection capabilities. The tool bridges the gap between automated scanning and manual testing expertise.
Related talks
Main Stage·42 min
James Kettle
James Kettle introduces multi-request single-packet race condition techniques, collapsing complex web application state machines within sub-millisecond windows.
Main Stage·22 min
Katie Inns
Katie Inns introduces HL7Magic, an open-source Burp Suite extension enabling security researchers to intercept, decode, and tamper with legacy HL7 medical device traffic.
NahamSec·1 hr 13 min
@Agarri_Fr Talks About Burp Suite, SSRF, Security Research and Learning Web Application Hacking.


