Collabfiltrator
Summary: Collabfiltrator is a Burp Suite extension, version 4.0.1, that assists in exfiltrating blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator. It was authored by Adam Logue, Frank Scarpella, Jared McLaren and Ryan Griffin, last updated 31 January 2025, and is distributed through the BApp Store with an estimated overall system impact rated Low.
Bottom line: This is a tool that turns blind RCE and SQL injection into readable output by tunneling it out over DNS through Burp Collaborator, a channel most network defenses treat as routine. PortSwigger states the extension is written by third-party users and carries no warranty, so anyone installing it is trusting code it did not review.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026