Client-Site Path Traversal Exploitation
Summary: PortSwigger's BApp Store lists a Burp Suite extension by Maxence Schmitt of Doyensec, version 1.0, last updated 30 October 2024, that passively scans proxy history for query parameters reflected inside the path of another query to find Client-Side Path Traversal. The extension does not detect DOM-based or stored CSPT unless the canary token feature is used, and it can send identified sinks to the Organizer via a right-click action.
Why it matters: The tool's own documentation states it misses DOM-based and stored CSPT without the canary token feature, so a clean passive scan of proxy history does not mean those variants are absent from your applications.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026