Loading…
24
A senior dev at my last job swore by Burp Suite for everything and it cost me a whole weekend
So this senior dev named Marcus kept pushing me to just use Burp Suite for all my API testing, said it was the only tool worth learning. I spent last weekend fuzzing a GraphQL endpoint for a client in Austin and kept getting errors I couldn't figure out, turned out Burp's default settings were mangling my JSON payloads. Switched to Postman with a simple collection and found the vuln in like 20 minutes, it was a broken auth check on the resolver. Marcus was a genius at his job but he'd been at the same company for 8 years and never touched anything else. Has anyone else gotten burned by taking tool advice from someone who's only ever used one thing?
1 comments
Log in to join the discussion
Log In1 Comment
robinj291mo ago
Ever try curl first? Kept me from fighting tool quirks.
3