Cyber Risks · PortSwigger Research

Faction Integration

Summary: PortSwigger's BApp Store lists a third-party extension, version 1.1, that integrates Burp Suite into the Faction assessment collaboration framework. The extension was last updated on 02 April 2024, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions for any particular purpose.

Bottom line: This is a third-party extension carrying PortSwigger's explicit no-warranty disclaimer, so any team wiring Burp into Faction's collaboration framework is trusting code PortSwigger does not vouch for inside the tool that holds their web assessment traffic.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related