[V13P] Manual testing simulator
Summary: PortSwigger's Burp Suite release adds a "manual testing simulator" that sends common test payloads to random URLs and parameters in a target application at irregular intervals, and Burp does nothing with the responses. The post, by Dafydd Stuttard, frames it as a way for Pro users to appear to be working if someone is reviewing the application's logs, and declines a suggested feature to configure a day-rate and calculate the cost to the client.
Key Takeaway: The tool's stated purpose is to make activity in an application's logs look like real testing while the tester is away, so a client relying on those logs to confirm work was performed is seeing generated traffic rather than findings.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026