Piper
Summary: Piper is a Burp Suite extension, authored by Andras Veres-Szentkiralyi at version 0.8, that passes HTTP requests and responses to external command-line programs through configurable pipelines and feeds the results back into Burp. PortSwigger notes that the extension is written by a third party, makes no warranty about its quality or usefulness, and advises reviewing imported configurations carefully before enabling them.
Bottom line: Piper runs external programs against live HTTP traffic inside Burp, so an imported configuration is effectively executable code from a third party that PortSwigger explicitly does not vouch for - and the page's own warning to review configurations before enabling them is the only control it offers.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026