Cyber Risks · PortSwigger Research

Burp to Discord

Summary: PortSwigger lists a Burp extension called Burp to Discord, authored by Thomas Stacey at version 1.0.0 and last updated 26 February 2026, that forwards issues to a Discord webhook as they are detected. The extension listens for issues from any source and sends the issue title, affected URL, and details, with optional follow-up messages carrying HTTP request and response traffic and automatic truncation of large payloads to prevent delivery failures.

What's compelling: Vulnerability findings, including raw HTTP request and response traffic, leave the scanner and land in a third-party chat channel the moment they are detected - so the question is who sits in that Discord channel and what your policy says about that traffic leaving your tooling.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related