Cyber Risks · PortSwigger Research

Bad Character Wordlist Generator

Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called Bad Character Wordlist Generator, version 1.0.0, authored by Hashtag_AMIN and last updated 30 April 2025. The extension is designed to create wordlists of "bad characters" for penetration testing and bug hunting, with support for encoding options, prefix/suffix customization, and custom wordlists for generating payloads.

What's compelling: PortSwigger states plainly that extensions are written by third-party users of Burp and that it makes no warranty about their quality or usefulness, so the trust decision for this tool rests with the team installing it rather than with the vendor.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related