Burp is one of the most popular tools used in dynamic web application testing with a lot of great features built-in. It also provides an API that lets you extend it further. It can be intimidating when starting to write an extension, but once you get going it's not too bad. This talk will walk through an example of creating a Burp extension that uses several different features of the API.

Carl Sampson is a product security engineer for Salesforce. He has 20 years of experience between development and application security and has worked in a number of organizations across the insurance and marketing sectors. He lives in central Indiana with his wife and three children. He has a passion for automation, tools development, and is the cofounder and leader of the Indy OWASP chapter.

@chs

Back to Derbycon 2017 video list