Bug Bounty When to use Zap VS Burp
HTML-код
- Опубликовано: 11 сен 2024
- All my videos are for educational purposes with bug bounty hunters and penetration testers in mind RUclips don't take down my videos 😉
When to use Zap VS Burp
📖 Udemy Course = www.udemy.com/...
📚 All My Courses = www.phdsec.com/
🛍 shop merch @ merch.phdsec.com
🐦Follow me on Twitter = / phd_security
Hydra is meant for bruteforcing logins and passwords through different protocols, whereas burpsuite and zap are made specifically for intercepting and updating requests.
How to bypass CMS and WAF protection that stops HTML, SQL, and XSS injection payloads? How to find the real origin IP of secured websites behind Cloudflare, Akamai, ModSecurity, AWS CDN, etc. ? How to bypass WAF using SQLMAP? How to find hidden vulnerable parameters and endpoints inside the .js files? How to find hidden admin panels, cPanel and WHM panels? Please cover these important topics. Thanks
You should add a donation link in your description for people who want to support you for your amazing work.
Sir please make a tutorial on OWASP ZAP as this tool contains more options than BURP
I prefer Zap it’s faster but does consume more resources and can lag and even freeze your system if all you do is scan.
Freezing system? Sorry? Can you make it clear?
When to use Burpsuite: When your company pays for it.
Else: zap.
Misleading title. It suggests it will also show situations where burp is better than zap, and multiple examples of both.
Instead it just shows one case scenario where zap does something that burp doesn't, bruteforce passwords.
I don't know how to describe the video, I hope it's fantastic ❤️ enough great video as always
Thanks for sharing, save me a lot of time and money!
Thank PhD Security
Cool could u do vedios on av edr evasion msfvenom payloads usualy get easily flaged by any defense right
Ayo , Really Great video ... Thanks a lot
Great video and info!
almost had you at 4:15
AWESOME Video!
Thanks you!!
Thanks for the video =)
What about csrf poc generation? Burp pro does that but community version doesn't.
how to set 2 payloads in zap (like ,on burp suit intruder we can choose "cluster bomb")
Thank u so much
zap is osm i like this thank's man keep grow and make video for api hacking
Most of the WordPress site now limit login attempts and server blocks your IP with 3 attempts.
Awesome!
Gday, wfuzz is my go to
I like ffuf and gobuster as fuzzers
Zap is good tool, but it is eating way too much RAM
Can cracked burpsuite be used for bug bounty targets?
No it's have a virus in it don't install it
obviously lol whos stopping you from using different tools
Umbrella zap is better
Ill check it out
What is umbrella zap?
🙂👌👍