Penetration testing workflow - Port Swigger
Summary: PortSwigger published a set of tutorials on using Burp Suite's automated and manual tools within a penetration testing workflow, last updated November 11, 2026. The tutorials can be completed as stand-alone exercises or selected individually to learn how to combine Burp tools for a specific task, with practice available on the deliberately vulnerable site ginandjuice.shop or a Web Security Academy lab.
Bottom line: Some of the tools used in this testing workflow are only available in Burp Suite Professional, so teams running the Community Edition cannot follow the full process as written.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026