Bug Bounty When to use Zap VS Burp

[@nocturne2172]

When to use Burpsuite: When your company pays for it. Else: zap.

[@alucardtech2136]

Hydra is meant for bruteforcing logins and passwords through different protocols, whereas burpsuite and zap are made specifically for intercepting and updating requests.

[@Free.Education786]

How to bypass CMS and WAF protection that stops HTML, SQL, and XSS injection payloads? How to find the real origin IP of secured websites behind Cloudflare, Akamai, ModSecurity, AWS CDN, etc. ? How to bypass WAF using SQLMAP? How to find hidden vulnerable parameters and endpoints inside the .js files? How to find hidden admin panels, cPanel and WHM panels? Please cover these important topics. Thanks

[@thelostlogan]

You should add a donation link in your description for people who want to support you for your amazing work.

[@AnthonyMcqueen1987]

I prefer Zap it’s faster but does consume more resources and can lag and even freeze your system if all you do is scan.

[@slipknot9966]

Freezing system? Sorry? Can you make it clear?

[@0xrohit54]

Sir please make a tutorial on OWASP ZAP as this tool contains more options than BURP

[@SerhiiKravchenko-p4j]

Thanks for sharing, save me a lot of time and money!

[@Peaker20]

I don't know how to describe the video, I hope it's fantastic ❤️ enough great video as always

[@themynamesb]

What about csrf poc generation? Burp pro does that but community version doesn't.

[@BobBob-qm2bm]

Thank PhD Security

[@mnageh-bo1mm]

Ayo , Really Great video ... Thanks a lot

[@ClipClips4k]

how to set 2 payloads in zap (like ,on burp suit intruder we can choose "cluster bomb")

[@firosiam7786]

Cool could u do vedios on av edr evasion msfvenom payloads usualy get easily flaged by any defense right

[@tjoleary8738]

Great video and info!

[@mellowgeekstudio]

Misleading title. It suggests it will also show situations where burp is better than zap, and multiple examples of both. Instead it just shows one case scenario where zap does something that burp doesn't, bruteforce passwords.

[@ЗахарЗаценко-е9е]

Thanks you!!

[@OthmanAlikhan]

Thanks for the video =)

[@Retnuh1974]

AWESOME Video!

[@sqfdjgslkfdjgs]

Most of the WordPress site now limit login attempts and server blocks your IP with 3 attempts.

[@gokul5582]

Thank u so much

[@0xM2r]

Awesome!

[@varunfoodvlog9215]

zap is osm i like this thank's man keep grow and make video for api hacking

[@Frogstomp_actual]

Gday, wfuzz is my go to

[@ryan_phdsec]

I like ffuf and gobuster as fuzzers

[@netbin]

Zap is good tool, but it is eating way too much RAM

[@candylanebiscuit]

almost had you at 4:15

[@pramodgurlhosur5215]

Can cracked burpsuite be used for bug bounty targets?

[@Amazon-Insider]

No it's have a virus in it don't install it

[@gammech2107]

obviously lol whos stopping you from using different tools

[@AVENGERS_ENDGAME_74]

Umbrella zap is better

[@ryan_phdsec]

Ill check it out

[@encyclopediablender]

What is umbrella zap?

[@razmjumehdi9069]

🙂👌👍