Turbo Intruder
Summary: Turbo Intruder is a Burp Suite extension from PortSwigger, authored by James Kettle at version 2.0.1, for sending large numbers of HTTP requests and analyzing the results. It is meant to complement Burp Intruder for attacks needing extreme speed or complexity, though the documentation states it is harder to use and its network stack is less reliable than core Burp's.
What's compelling: The extension ships with an MCP server that is off by default and must be enabled through a checkbox labeled "enable unsafe MCP server" in its settings, so any team running Turbo Intruder should know whether that switch has been flipped.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026