Introduction to the FlowMate BurpSuite Plugin

Introducing our BurpSuite Plugin FlowMate that utilizes the power of data flow analysis and automated analysis in order to increase coverage in web application pentesting. The plugin works from a black-box perspective by only parsing HTTP requests and responses for input paramteres and their occurences throughout the application. The resulting graph enables you to detect specific data flows of interest and find vulnerabiliites much more easy and targeted.

After the initial release for BlackHat USA 2023, as well as DEF CON 31, this video gives a short introduction on the general idea of FlowMate and how to get it up and running. Furthermore, it walks you through the UI and features of the plugin along the lines of an exemplary use-case.

FlowMate GitHub Repository: https://github.com/usdAG/FlowMate
Other tools developed by usd AG: https://herolab.usd.de/unsere-plattfo...
Blog: https://herolab.usd.de/labnews/