HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
Burp Suite's Turbo Intruder now fuzzes over HTTP/3 at 100k+ requests per second, closing a major gap in testing QUIC-based services that many European organisations are quietly adopting.
Summary written by editorial AI · Source link below
How many bugs have you missed because you didn’t send quite enough HTTP requests? Turbo Intruder now supports HTTP/3, can comfortably exceed 100,000 requests per second over Wi-Fi, and auto-tunes for
Editorial Analysis
As enterprises migrate web services to HTTP/3, security testing tools must follow; gaps in QUIC fuzzing coverage leave modern attack surface untested.
Update penetration testing runbooks to include HTTP/3 targets and verify that assessment tooling supports QUIC-based fuzzing.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at PortSwigger Research in a new tab.
More from the Tools Desk
- JANUS: Agentic Cross-Language Fuzzing Harness Generation for Android Native Libraries4d
- AgentTriage: Replayable Security Diagnosis Across Heterogeneous Agent Runtimes4d
- [tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner4d
- CyberHull: Deterministic Malicious URL Isolation via Convex Hull6d
- HydraPoT: A Configurable Multi-Agent Framework for Cost-Aware LLM-Assisted Honeypots6d