Cyber Risks · PortSwigger Research

JSON Escaper

Summary: PortSwigger's BApp Store lists the JSON Escaper, a Burp Suite plugin by Akash C at version 1.3, last updated 24 September 2024, that escapes JSON payloads for pentesters instead of manual escaping. The plugin takes a payload, escapes it, and displays the result in a JTextArea for selection and copying, and PortSwigger notes it is third-party software with no warranty of quality or usefulness.

Why it matters: This is a third-party extension with an overall system impact rated Low, and PortSwigger explicitly makes no warranty about its quality or usefulness - so anyone installing it into Burp is trusting an outside author's code inside a core testing tool.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related