Cyber Risks · PortSwigger Research

Sequence Comparer

Summary: PortSwigger's BApp Store lists a third-party Burp extension called Sequence Comparer, version 1.0.0, last updated 22 May 2025, that enables advanced comparison of sequences of HTTP requests and their responses. The extension is aimed at analyzing differences and similarities between two sets of HTTP sequences, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions.

What you should know: The tooling that inspects HTTP request and response sequences is available to anyone as a free Burp extension, so the same comparison capability your testers use to find differences between sessions is also in reach of third parties probing your applications.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related