Cyber Risks · PortSwigger Research

Session Keeper

Summary: PortSwigger's BApp Store lists Session Keeper, a Burp Suite extension by Joe Black Security, version 1.0.0, last updated 18 December 2025, that automatically resends low-impact requests at configurable intervals to keep active sessions alive. The listing states it is intended for extended breaks or stepping away from testing, provided the server supports persistent sessions, and notes that extensions are written by third-party users of Burp with no warranty from PortSwigger Web Security.

Why it matters: A third-party extension that automatically fires requests on a schedule runs inside the same tool your testers use against production-adjacent systems, and PortSwigger explicitly makes no warranty about its quality or usefulness - so the configurable interval is a setting someone in your organization has to own.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related