Image Location and Privacy Scanner
Summary: A third-party Burp Suite extension called Image Location and Privacy Scanner passively scans HTTP responses for embedded images and raises issues when those images contain GPS location metadata or other potentially sensitive personal information. The extension, authored by Jay Ball at version 1.3.0, is aimed at spotting privacy leaks in image uploads, such as photos unintentionally disclosing a user's location or identifying details.
Bottom line: The tool's own documentation notes that Burp hides images by default, which also hides the extension's alerts until the site map filtering is reconfigured - so a team can believe it is checking uploads for location metadata while seeing nothing at all.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026