Document My Pentest
Summary: PortSwigger released a Burp extension called Document My Pentest that generates a written description of whatever a tester is probing for, including path traversal, SQL injection, and XSS, and can document items from Proxy History as separate requests or as a collection of requests and responses. The extension, authored by Gareth Heyes at version 1.1.0 and last updated 05 August 2025, uses AI that the listing says is not flawless, so generated notes can be manually edited for corrections.
Why it matters: The tool's own listing concedes the AI sometimes gets things wrong, which puts the accuracy of the pentest record in the hands of whoever reviews and corrects it - and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026