Refining your HTTP perspective, with bambdas
Summary: PortSwigger added support for custom columns in Burp Suite, letting users surface chosen elements of HTTP requests in tables using code snippets called bambdas. The research team shared examples ranging from parsing GraphQL operations out of request bodies to flagging cookies with SameSite disabled and endpoints with unsafe CSP directives like unsafe-inline or unsafe-eval.
Why it matters: Modern sites send thousands of HTTP messages, and the post's own framing is that it's all too easy to overlook something critical - a custom column that scores how hackable a request is from 0-100 is where the author expects this to go.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026