Cyber Risks · PortSwigger Research

Response Overview

Summary: PortSwigger lists a Burp extension called Response Overview, version 1.6.0, authored by Tobias "floyd" Ospelt, that groups HTTP response bodies by similarity and presents one request/response per group. The extension is intended to help security testers spot anomalies, exotic error messages, and overlooked functionality across responses captured from any Burp tool, and is rated as having low overall system impact.

What's compelling: The tool exists because testers otherwise review responses one at a time, and the responses most worth finding - unusual errors and forgotten functionality - are the ones that differ from the rest; grouping by similarity is how that difference gets surfaced.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related