Kerberos Upstream Proxy
Summary: PortSwigger's BApp Store lists a third-party extension by Drew Green, version 1.3 and last updated 10 May 2024, that lets Burp Suite work through an upstream proxy requiring Kerberos authentication. PortSwigger states that extensions are written by third-party Burp users and that it makes no warranty about their quality or usefulness for any particular purpose.
Key Takeaway: Kerberos-authenticated upstream proxies are a common control in enterprise networks, and this extension is third-party code that PortSwigger explicitly does not warrant - so the tooling your testers install to get past that control carries its own supply-chain and quality risk.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026