usagehints

How-to's and external docs

Burp Intruder and OWASP Zap

• Introducing FuzzDB https://blog.mozilla.org/security/2013/08/16/introducing-fuzzdb/
• Using FuzzDB for testing website security https://blog.mozilla.org/security/2014/03/25/using-fuzzdb-for-testing-website-security/
• How to use FuzzDB's regex/errors.txt in burpsuite intruder to find more bugs https://github.com/fuzzdb-project/fuzzdb/wiki/regexerrors
• Burp Intruder docs http://portswigger.net/intruder/help.html
• Burp Suite with Google Android Emulator http://cktricky.blogspot.com/2010/04/android-emulator-burpsuite.html
• Pentesting with Burp Suite presentation https://repo.zenk-security.com/Techniques%20d.attaques%20%20.%20%20Failles/Pentesting%20With%20Burp%20Suite.pdf
• Burp extension for non-HTTP traffic https://github.com/summitt/Burp-Non-HTTP-Extension