Turbo Intruder: Abusing HTTP Misfeatures to Accelerate Attacks by James Kettle

[@danieljordan1793]

This guy is awesome, his content is always original and extremely helpful!

[@waliedahmed5030]

Agree!

[@sakettestsakettest8009]

This guy is incredible ❤️

[@saeedkamranfar684]

GREATE, James kettel is the legend of web security

[@CU.SpaceCowboy]

i saw a video of him getting a shell on a code sandbox website with like 2-3 broken up lines of php. hes legendary.

[@rnz2363]

i did not have a clue about HTTP pipelining. good info here. thx

[@SatouSei13]

Amazing tool. Thank you! 🙏🙏

[@killzann7757]

This is incredible, thanks

[@freem4nn129]

nice !! thx for this

[@DragonStoneCreations]

How to configure multiple injection points in the request? I tried using %s in 2 locations, payload is injected only first %s :(

[@poxato]

there's a premade script in the scripts section of the turbo intruder for multiple Parameters.

[@mthulisi8840]

Excellent stuff!

[@skylinegeekhackerone8560]

i get error, SyntaxError: ("mismatched input 'table' expecting INDENT", ('', 26.0, 'table.add(req) ')) when i user race.py to check race condition

[@DeepakPrajapati-ny3bj]

Thank you for this very informative and very helpful video.

[@jessicaito5212]

What am I doing wrong. I am only getting 100-141 RPS. Do I need to get anything other then Turbo Intruder? My settings are concurrentConnections=25 requestsPerConnection=100 Pipeline=True

[@yoshi5113]

I love James Kettle ..

[@a.for.arun_]

@albinowax Legend!!!

[@ZoomAnimationHere]

Thanks

[@slaxblake]

How to use it for race condition @Bugcrowd

[@tombautista2913]

I am trying to tweak setting just like you've guided but not able to achieve those thousands and thousands of RPS.

[@tombautista2913]

I can provide you with more details but I don't have my own website I was just trying it on random websites on internet which is illegal know that.

[@tibabalaseo2046]

@@tombautista2913 Maybe those websites just blocked you off IP? But it's been 2 years so i'm sure you know that

[@Ramazan05duldug]

Thanks! )

[@shayberkovich8104]

Still don't understand why James hasn't incorporated this into Intruder functionality - that would add multiple insertion points, wordlists and other Intruder features for free. Instead, he decided to implement this as a separate extension.

[@SplinterAI]

Is there any chance that you would consider helping me Find my first bug bounty ! Im stuck Im stuck . Great video thou .

[@SplinterAI]

You are the man !! Can you download turbo intruder for free?

[@slayeeerrr]

It is integrated with Burp Suite as a plugin, and it is available even on Community Edition! :-)

[@TheHackTodayOfficial]

cool!

[@bigdatax6512]

hey there i want to ask something ..how can i contact you