Upload Scanner Burp extension: Level up your file upload hacking skills

In this video, you will learn how to perform exhaustive testing of file upload features to find interesting vulnerabilities in your bug bounty hunting journey.
Read more on thehackerish.com
Follow us on Twitter: / thehackerish
Listen on Anchor: anchor.fm/theh...
Listen on Spotify: open.spotify.c...
Listen on Google Podcasts: podcasts.googl...
Listen on Breaker: www.breaker.au...
Listen on PocketCasts: pca.st/f6ipzls4
Listen on RadioPublic: radiopublic.co...

[@vijaySingle143]

Best video ,please post more videos on burpsuite

[@omerfarooqdemir9907]

Great video bro. I hope it will continue

[@rajeshranjan7034]

Thankyou so much for making this video

[@thehackerish]

Thank you for your feedback! Enjoy

[@Max-mz3is]

how you gonna filter out results if all status codes returned by application are 200?? isn't there any Grep match or something similar??

[@xnl-h4ck3r]

Thanks for the great video!

[@thehackerish]

Glad you liked it!

[@zzzzebra3050]

It's cool!Thanks!!

[@thehackerish]

I'm glad you like it

[@catcute2437]

Thanks, you are the best

[@thehackerish]

You are! Thank you!

[@0xnightfury]

loved it

[@neetech3716]

Thank You... Will it also be detect ssrf vulnerability with this scanner automatically..

[@thehackerish]

It depends on how the backend is done. If the it takes some input and use them to send some requests, then yes, it will be detected.

[@tiptrcks3960]

Hey bro what ever i upload by modifying content type etc the file is saved in web server as a .pdf in my case what ever i try it stills got saved as .pdf on server

[@hannanshah1105]

I need ur help please urgent. I am getting following error : Issue detail This issue was generated by the UploadScanner extension. A timeout occured when uploading a file. This could mean that you did memory exhaustion or a DoS attack on some component of the website. Or it was just a regular timeout. Check manually.

[@thehackerish]

I would try manually and see if the upload feature still works.

[@tanercoder1915]

first! and now I need to get some bounty money💰 to buy myself a pro version.

[@thehackerish]

... and go find some bugs!

[@tanercoder1915]

@Script kiddie Thanks, I want to buy myself. Give back to community!

[@Amazon-Insider]

@Script kiddie be aware that I hear it contained a backdoor in it

[@turansecurity]

It doesn't work

[@buatsubs3961]

u make me fall a sleep

[@thehackerish]

Cool! Watch my old videos when you get to bed. My recent ones are not as sleepy though.

[@turansecurity]

Or it probably will be false positive