Sensitive Discoverer
Summary: Sensitive Discoverer is a Burp Suite extension, authored by CYS4 and at version 4.2.0 as of 15 November 2024, that matches lists of regular expressions against all HTTP messages stored in Burp to find sensitive strings or file extensions. It ships with pre-defined regex sets for common needs and supports importing custom lists, and PortSwigger notes that extensions are written by third-party users and come with no warranty of quality or usefulness.
Why it matters: The tool that surfaces sensitive strings across captured traffic is a third-party extension PortSwigger explicitly does not vouch for, so the regex lists and the messages they run against are only as trustworthy as the party supplying them.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026