Cyber Risks · PortSwigger Research

Swagger Parser

Summary: The Swagger Parser is a Burp Suite extension, version 1.0 by Enes Bulut of Trendyol, that parses Swagger documents and lets users view the parsed requests in a table and send them to Repeater, Intruder, and Scanner. It was last updated on 14 June 2024 and is distributed through the BApp Store, with PortSwigger stating that extensions are written by third-party users of Burp and carry no warranty of quality or usefulness.

Key Takeaway: The tool that turns API definitions into ready-to-send requests for Repeater, Intruder, and Scanner is a third-party extension PortSwigger explicitly does not vouch for, so the same parsing step that speeds up API testing also puts unreviewed code inside the tool your testers rely on.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related