Proxy Rotate
Summary: PortSwigger lists a Burp extension called Proxy Rotate, version 1.0.1 by Petru Surugiu, that routes each HTTP request through a different proxy from a configurable list, assigning a proxy per connection. The listing states this enables IP rotation for anonymity, WAF evasion, geo-targeted testing, and simulating distributed attack patterns during security assessments.
Key Takeaway: A per-connection proxy rotation tool built into a widely used scanner means WAF evasion and distributed attack simulation are a configuration step away for anyone running Burp, so controls that rely on source IP reputation face traffic that changes addresses with every request.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026