Welcome to AI pentesting - add on-demand AI assistance directly to your workflow with new, agentic Burp AI capabilities
Summary: PortSwigger added agentic Burp AI capabilities to Burp Suite Professional, including direct pairing with Burp AI inside Repeater so testers can prompt it without switching tools. The AI can generate and send payloads to test for stored XSS, attempt filter bypasses for XSS, SQL injection, and template injection, and build on a proof-of-concept to demonstrate business impact, all within PortSwigger's boundary for its 80,000+ users.
Why it matters: An AI agent that generates and sends attack payloads inside your testing workflow is also an agent that can be steered by prompt injection - PortSwigger's own researcher is debuting a talk on detecting prompt injection in the wild this October, which tells you the vendor sees the risk as live.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026