Bug Bounty Tools for Recon and Hunting - Port Swigger

Summary: PortSwigger's page on bug bounty tools cites a 2020 HackerOne report of over 3,000 respondents in which 89% of hackers said Burp Suite helps them most when hacking, ahead of Fiddler at 11% and WebInspect at 8.2%. The page describes Burp Suite's components, including an intercepting proxy that reads HTTPS traffic via a self-signed CA certificate, a scanner covering the OWASP Top 10, and the Turbo Intruder extension, which the page says can exceed 30,000 requests per second.
What you should know: The page states that Turbo Intruder can exceed 30,000 requests per second while many similar tools struggle to reach 1,000, a rate that matters to anyone defending a target rather than testing one.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026