Cyber Risks · PortSwigger Research

Report Generator

Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called Report Generator, version 1.0.0, authored by GHULI3V and last updated 31 July 2025, which lets penetration testers produce vulnerability reports in PDF and Word formats. PortSwigger states that extensions are written by third-party Burp users and that it makes no warranty about their quality or usefulness for any particular purpose.

Bottom line: The reporting tool that turns pentest findings into client deliverables is third-party code running inside Burp, and PortSwigger explicitly disclaims any warranty on its quality or usefulness - so the accuracy of what reaches your clients rests on an extension you have not vetted.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related