HARBringer, HAR Importer
Summary: PortSwigger's BApp Store lists HARbringer, a third-party Burp extension by author abirasecurity at version 1.0.0, last updated 18 September 2025, that imports HTTP Archive (HAR) files directly into the site map while preserving the original HTTP requests and responses. The listing states the extension maintains the exact captured traffic for analysis of previously recorded sessions, and notes that extensions are written by third-party Burp users with no warranty from PortSwigger.
Bottom line: HAR files are routinely handed around during incident reviews and vendor exchanges, and this extension loads that recorded traffic straight into Burp's site map - so the captured requests and responses, credentials and session tokens included, become working material in a tester's tool. PortSwigger explicitly disclaims any warranty on third-party extensions, which puts the review of what gets installed into Burp on your team.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026