Five years ago, we set out to build something different: a team of world-class offensive security experts who trace their roots back to the early days of the discipline, don't cut corners, go as deep as the problem demands, and approach every engagement with the same relentless curiosity that defined the craft from the start.

Today, we're celebrating that anniversary with a milestone we're genuinely proud of: #HNSecurity has brand new headquarters in #Turin! A bigger space. A proper hacking lab, because our researchers deserve the right playground. And ('cause we're Italian and we have our priorities straight 🇮🇹) a well-equipped kitchen.
 
Here's to five more years of breaking things so others can't, staying ahead of real-world adversaries, and giving our clients the strategic edge they deserve. 🥂

https://hnsecurity.it/

🎙️ Join Federico’s Discord talk later today!

As part of #BurpExtensibilityMonth initiatives, our Research Lead and #BurpAmbassador @apps3c is joining #PortSwigger on Discord for “Restoring testability: Handling complex scenarios in Burp Suite with a custom extension”.

Most web and mobile backends and APIs can be assessed effectively with #BurpSuite out of the box. But testers sometimes hit scenarios where standard workflows become impractical, such as encryption, request signing, custom data formats, WAF controls, token handling, and other protections.

In this talk, Federico will explore how custom Burp Suite extensions can integrate those mechanisms directly into your testing workflow, so you can keep using tools like Repeater, Intruder, Scanner, and more as if the underlying complexity was not there.

Expect a real-world inspired scenario, practical design guidance, and plenty of extension-building inspiration.

👉 Register your interest here!
https://discord.com/events/1159124119074381945/1499761261750128670

To kick off his collaboration with @portswigger as a Burp Suite Ambassador, our Research Lead @apps3c just published the 10th article on the creation of extensions for #BurpSuite. Topic: #Burp #AI!

https://hnsecurity.it/blog/extending-burp-suite-for-fun-and-profit-the-montoya-way-part-10/

In this latest article in our long-running series on #BurpSuite #Extension #Development, @apps3c illustrates how to extend the Active and Passive Scanner in your favorite #WebApplication #PenetrationTesting tool with Custom Scan Checks:

https://hnsecurity.it/blog/extending-burp-suite-for-fun-and-profit-the-montoya-way-part-9/

Check it out!

Our senior security analyst @[email protected] has published a follow-up to his popular #Groovy Template Engine #Exploitation writeup:

https://hnsecurity.it/blog/groovy-template-engine-exploitation-part-2/

Check out some new practical exploitation tricks that he figured out while working on a real-world scenario.