Cyber Risks · PortSwigger Research

AI Substitutor

Summary: PortSwigger's BApp Store lists AI Substitutor, a Burp Suite extension by Sergey Bobrov (BlackFan) that uses AI-powered features to automatically replace HTTP request parameters and headers with contextually relevant values. Version 1.0.0, last updated 03 June 2025, is aimed at requests derived from OpenAPI/Swagger definitions, extracted from JavaScript files, or generated by automated tools.

Key Takeaway: The extension is third-party code, and PortSwigger states it makes no warranty about its quality or usefulness for any particular purpose - so the tool that rewrites your request traffic carries no vendor guarantee behind it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related