Burp Extensibility 2026: Awards, Talks, and Highlights
Summary: PortSwigger ran Extensibility Month on its Discord server throughout May 2026, with talks, workshops, community sessions and the Burp Extension Awards decided by community vote. More than 200 nominations were submitted for 46 extensions, with Highlighter And Extractor drawing the most nominations at 18 votes and JS Miner, JWT Editor, Auth Analyzer and Hackvertor among the shortlisted tools.
Key Takeaway: The nominations that won were scored on specificity and real-world use cases, not raw popularity - and the JS Miner write-ups describe hidden endpoints in JS files exposing PII, exploitable secrets at critical severity, and hardcoded credentials granting access to internal systems, which is the same class of finding your own testers may be missing if their tooling stops at the scanner's defaults.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026