Cyber Risks · PortSwigger Research

Turbo Intruder

Summary: Turbo Intruder is a Burp Suite extension from PortSwigger, authored by James Kettle at version 2.0.1, for sending large numbers of HTTP requests and analyzing the results. It is meant to complement Burp Intruder for attacks needing extreme speed or complexity, though the documentation states it is harder to use and its network stack is less reliable than core Burp's.

What's compelling: The extension ships with an MCP server that is off by default and must be enabled through a checkbox labeled "enable unsafe MCP server" in its settings, so any team running Turbo Intruder should know whether that switch has been flipped.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related