Cyber Risks · PortSwigger Research

Header Change Notifier

Summary: PortSwigger's BApp Store lists a third-party extension called Header Change Notifier, version 2.1.0, by author MohamedXploit, last updated 30 March 2026. It uses passive scanning to track security-critical HTTP response headers across browsing sessions to the same URL and raises scanner issues when those headers change.

Key Takeaway: The extension targets security misconfigurations, inconsistent server behaviour, and weakened security policies during testing - the kind of header drift that can quietly strip protections from a URL you already assessed. PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.

Read the original at PortSwigger Research ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026