Cyber Risks · PortSwigger Research

AWS cURL Command

Summary: PortSwigger's BApp Store lists a third-party Burp extension, version 1.0.0 by author Dotwut and last updated 26 June 2025, that generates AWS-signed curl commands from HTTP requests. The extension adds valid AWS Signature Version 4 headers so AWS API requests can be tested and reproduced on the command line.

Why it matters: A tool that turns captured requests into working SigV4-signed curl commands lowers the effort of replaying AWS API calls outside the browser, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related