Bug Bounty When to use Zap VS Burp

All my videos are for educational purposes with bug bounty hunters and penetration testers in mind RUclips don't take down my videos 😉
When to use Zap VS Burp
📖 Udemy Course = www.udemy.com/...
📚 All My Courses = www.phdsec.com/
🛍 shop merch @ merch.phdsec.com
🐦Follow me on Twitter = / phd_security

[@alucardtech2136]

Hydra is meant for bruteforcing logins and passwords through different protocols, whereas burpsuite and zap are made specifically for intercepting and updating requests.

[@Free.Education786]

How to bypass CMS and WAF protection that stops HTML, SQL, and XSS injection payloads? How to find the real origin IP of secured websites behind Cloudflare, Akamai, ModSecurity, AWS CDN, etc. ? How to bypass WAF using SQLMAP? How to find hidden vulnerable parameters and endpoints inside the .js files? How to find hidden admin panels, cPanel and WHM panels? Please cover these important topics. Thanks

[@thelostlogan]

You should add a donation link in your description for people who want to support you for your amazing work.

[@0xrohit54]

Sir please make a tutorial on OWASP ZAP as this tool contains more options than BURP

[@AnthonyMcqueen1987]

I prefer Zap it’s faster but does consume more resources and can lag and even freeze your system if all you do is scan.

[@slipknot9966]

Freezing system? Sorry? Can you make it clear?

[@nocturne2172]

When to use Burpsuite: When your company pays for it.
Else: zap.

[@mellowgeekstudio]

Misleading title. It suggests it will also show situations where burp is better than zap, and multiple examples of both.
Instead it just shows one case scenario where zap does something that burp doesn't, bruteforce passwords.

[@Peaker20]

I don't know how to describe the video, I hope it's fantastic ❤️ enough great video as always

[@user-zm4dm9ry2p]

Thanks for sharing, save me a lot of time and money!

[@BobBob-qm2bm]

Thank PhD Security

[@firosiam7786]

Cool could u do vedios on av edr evasion msfvenom payloads usualy get easily flaged by any defense right

[@mnageh-bo1mm]

Ayo , Really Great video ... Thanks a lot

[@tjoleary8738]

Great video and info!

[@candylanebiscuit]

almost had you at 4:15

[@Retnuh1974]

AWESOME Video!

[@user-wv4ni7ie5i]

Thanks you!!

[@OthmanAlikhan]

Thanks for the video =)

[@themynamesb]

What about csrf poc generation? Burp pro does that but community version doesn't.

[@ClipClips4k]

how to set 2 payloads in zap (like ,on burp suit intruder we can choose "cluster bomb")

[@gokul5582]

Thank u so much

[@varunfoodvlog9215]

zap is osm i like this thank's man keep grow and make video for api hacking

[@sqfdjgslkfdjgs]

Most of the WordPress site now limit login attempts and server blocks your IP with 3 attempts.

[@0xM2r]

Awesome!

[@Frogstomp_actual]

Gday, wfuzz is my go to

[@ryan_phdsec]

I like ffuf and gobuster as fuzzers

[@netbin]

Zap is good tool, but it is eating way too much RAM

[@pramodgurlhosur5215]

Can cracked burpsuite be used for bug bounty targets?

[@Amazon-Insider]

No it's have a virus in it don't install it

[@gammech2107]

obviously lol whos stopping you from using different tools

[@AVENGERS_ENDGAME_74]

Umbrella zap is better

[@ryan_phdsec]

Ill check it out

[@encyclopediablender]

What is umbrella zap?

[@razmjumehdi9069]

🙂👌👍