Flo Qast Case Study | Port Swigger
Summary: A PortSwigger case study presents a security tester describing hands-on use of Burp Suite tools, including Repeater as their number one tool for modifying requests, Intruder for running lists of up to 100 payloads without writing a Python script, and Collaborator for checking SSRF by sending payloads to inputs and observing callbacks. The tester also describes running targeted scans on suspicious requests such as search parameters, using BChecks for passive and active scan checks, and pulling example requests with payloads directly from scan reports.
Bottom line: The workflow described depends on a tester manually spotting a suspicious request and choosing to scan it, so coverage tracks the individual's judgment rather than a fixed process - a gap worth knowing when you count on scanner output as your assurance.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026