Want agents that can apply the latest techniques from @PortSwiggerRes on your behalf?
This marks the beginning of an exciting new approach where we can ship new and updated skills to Burp AT at any time in a matter of minutes. The next time you start an agent, it automatically
Burp scanner now detects request-header injection, and Burp AT contains a researcher-crafted skill that weaponises it into a high-impact PoC with a single prompt! It'll even do CRLF-Powered Tunnelling if full desync exploitation isn't viable. Read below for full details:



