Skip to content

Introducing HUNT Data Driven Web Hacking & Manual Testing

Jason Haddix

Burp Suite extension using real-world assessment data to guide web hackers toward vulnerable parameters.

Summary

Problem Statement

Web hacking relies on pure automation, which misses significant vulnerabilities. What if attackers had powerful alerts based on real threat intelligence about where vulnerabilities occur?

HUNT Solution

HUNT is a new Burp Suite extension providing parameter-level suggestions for vulnerability discovery. Rather than generic scanning, it uses data parsed from hundreds of real-world assessments.

Data-Driven Approach

HUNT guides web hackers toward vulnerable parameter patterns for SQLi, CMDi, LFI/RFI, and more. This data-driven design ensures more thorough target assessment beyond what pure automation achieves.

Methodology Integration

The extension organizes common web hacking methodologies inside Burp Suite. Open source design allows the security community to participate in improving detection capabilities. The tool bridges the gap between automated scanning and manual testing expertise.

Related talks