Cyber Risks · PortSwigger Research

Postman Burp Importer

Summary: PortSwigger's BApp Store lists a Postman Collection Importer extension, authored by Abdul Rahman at version 1.0.4 and last updated 27 November 2025, that converts Postman collections and environments into Repeater tabs and Sitemap entries. The extension supports variable resolution, authentication methods, and multiple request body types for API security testing workflows, and PortSwigger notes that extensions are written by third-party users of Burp and come with no warranty of quality or usefulness.

What you should know: This is third-party code loaded into Burp, and PortSwigger explicitly disclaims any warranty on its quality or usefulness - so the trust decision sits with the team installing it, not with the vendor.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related