HTTP/3 Adapter
Summary: PortSwigger Research lists an HTTP/3 Adapter extension, version 0.0.1, by Tom Stacey, last updated 23 September 2026, that intercepts requests, converts them to HTTP/3 (QUIC), transmits them to the target, and converts responses back to a compatible HTTP version for display and analysis. The listing states the extension is installed through the BApp Store in Burp Extender or downloaded for offline installation, and that PortSwigger makes no warranty about third-party extensions' quality or usefulness.
Why it matters: The tooling to send scanner traffic over HTTP/3 now sits in the same BApp Store as any other extension, so the protocol your applications speak is no longer a barrier to automated testing - and the listing itself carries no warranty from PortSwigger on what that third-party code does.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026