Spec Ops, OpenAPI/Swagger Workbench
Summary: SpecOps is a Burp Suite extension, version 1.4.2 by author rawatprince, that ingests an OpenAPI or Swagger specification and builds a workbench for testing every documented endpoint. Specs can be loaded from a file, URL, or pasted directly, and the extension provides tooling for parameter management, authentication, custom headers, and bulk request execution.
What's compelling: PortSwigger states that extensions are written by third-party users of Burp and that it makes no warranty about their quality or usefulness, so a tool that ingests your API spec and drives bulk requests against every documented endpoint enters your testing pipeline on the author's assurances, not the vendor's.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026