Semgrepper
Summary: PortSwigger's BApp Store lists Semgrepper, a third-party Burp Suite extension by Riccardo Cardelli (version 1.4, last updated 29 May 2025) that integrates Semgrep static analysis into passive scanning so users can apply custom Semgrep rules against HTTP responses. It requires the Semgrep CLI installed locally and is aimed at community-contributed rulesets for detecting client-side issues in JavaScript and other front-end technologies.
Why it matters: The extension carries a low estimated system impact and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so the rules you point at your own traffic are yours to validate.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026