's Avatar

@soffensive.bsky.social

21 Followers  |  360 Following  |  8 Posts  |  Joined: 20.10.2024  |  1.546

Latest posts by soffensive.bsky.social on Bluesky

Video thumbnail

#BurpSuite Installing BApp files and refreshing the available extensions in Burp Suite, slightly hidden

07.08.2025 07:14 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

TIL: When you update your hostname in Linux, always update your /etc/hosts file as well and add an entry with 127.0.0.1. Otherwise, you may encounter a delay when running sudo, which will perform DNS lookups for your hostname ๐Ÿคก

16.06.2025 06:35 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

New blog post: Long-term Kali Linux usage in VirtualBox. Make sure to always manually install the latest guest additions after each kernel update

soffensive.github.io/posts/variou...

13.04.2025 14:13 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Video thumbnail

If you also missed the new button like me, quickly see your Burp AI credits in the Burp UI at the bottom right:

11.04.2025 09:08 โ€” ๐Ÿ‘ 3    ๐Ÿ” 2    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Kali Linux Long Term Usage Part 2: Systemd, Partitions, and Swap Space I am using Kali Linux on a regular basis inside a virtual machine (VirtualBox) and I have maintained my image for a couple of years. Over the last months and years, the booting time got worse and wors...

New blog post: Long-term Kali Linux Usage in VirtualBox: Disk Resizing Issues, Systemd, and Swap Space

soffensive.github.io/posts/variou...

07.04.2025 12:18 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Kali Linux Long Term Usage Part 1 I am using Kali Linux on a regular basis inside a virtual machine (VirtualBox) and I have maintained my image for a couple of years. Over the last months and years, the booting time got worse and wors...

New blog post: Long-term usage of Kali Linux in a VM and optimizations. Part 1: Disk Usage

soffensive.github.io/posts/variou...

30.03.2025 15:08 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Wondered why my system occupied so much space and it turned out Go consumed a lot for caching over the years...

go clean -modcache
go clean -cache
go clean -testcache
go clean -fuzzcache
Thanks for 30 gigs of space!
scripter.co/cleaning-up-...

26.03.2025 11:29 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

If you want to use Bruno (www.usebruno.com) with Burp, try this:
export NODE_TLS_REJECT_UNAUTHORIZED=0; bruno
or to allow a specific CA only:
export NODE_EXTRA_CA_CERTS=~/burpca.pem; bruno

The current Bruno UI settings for certificate validation don't work (v2.0.1)

26.03.2025 09:04 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

Interesting: this webb app uses the "X-Forwarded-Host" header with the requested URL to built the final URL. The XFH header can include path and parameters, not just the host, and everything is combined.

This gave me an easy 403 bypass at the proxy level, but I wonder what else can be done...

03.12.2024 07:39 โ€” ๐Ÿ‘ 12    ๐Ÿ” 2    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 1

@soffensive is following 19 prominent accounts