HUNT: Data Driven Web Hacking & Manual Testing
summary
HUNT is a Burp extension that converts Bugcrowd bounty data into parameter-level alerts so manual testers get concrete places to look instead of vague topics. The backend parses roughly 600 programs and ~18,000 parameters to map names (e.g., id, file, template) to classes like SQLi, RCE, LFI, SSRF and SSTI. It runs as a passive scanner, shows request/response evidence in a GUI, stores methodology and resources as JSON-driven alerts that load, save and extend.
AI-written summary · about
chapters (29)
- 0:00Intro
- 1:07Contributions
- 2:21The Problems
- 4:14Current Solutions
- 6:36Introducing HUNT
- 8:04Level 1 - HUNT Scanner
- 8:23Bug Location (Tribal Knowledge)
- 9:23Vulnerability Locations
- 12:52Advisory
- 13:57SQL Injection
- 15:33Server Side Request Forgery AAA
- 16:46Insecure Direct Object Reference
- 17:36Server Side Template Injection
- 18:08Debug & Logic Parameters
- 19:00HUNT Scanner Implementation
- 23:35Level 2 - HUNT Methodology
- 24:02Methodologies
- 26:28Description
- 27:16Multiple Request/Response
- 27:49Resources
- 28:16Notes
- 29:32Methodology Implementation
- 33:30Plugin Installation
- 34:12Installation - Plugin
- 34:37Setting Target Scope
- 35:24Setting Passive Scanner Scope
- 35:46Running the Passive Scanner
- 36:40Scanner Extensibility
- 37:14Methodology Extensibility
related talks
46mThe Bug Hunter's Methodology 2.0
31mThreat Hunting — Demystified
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
40mHunt and Gather: Developing Effective Threat Hunting Techniques
36mSo You Want to Build a Threat Hunt Program
43mHow The Hack?
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
29mHunter – Optimize your Pentesters Time