Cyber Risks · PortSwigger Research

Hotpatch

Summary: Hotpatch is a Burp Suite extension, authored by Software Secured and listed at version 1.0.18, that lets users hook into key functions with custom Python or JavaScript scripts. Through the Montoya API, those scripts can modify requests and responses, handle session management, process payloads, and automate repetitive tasks.

Why it matters: This is a third-party BApp, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users of Burp - so the scripting hooks that touch your requests, responses, and session handling carry no vendor guarantee.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related