JScriptor
Summary: PortSwigger's BApp Store lists JScriptor, a third-party Burp Suite extension by Nguyen Duy Quoc Khanh, version 2.01, last updated 13 February 2024, which imports JavaScript code and runs it like Postman's Pre-script and Post-script, showing the script output in the extension. PortSwigger states that extensions are written by third-party users of Burp and that it makes no warranty about their quality or usefulness for any particular purpose.
Why it matters: This is a third-party extension running imported JavaScript inside Burp, and the vendor explicitly disclaims any warranty on quality or usefulness - so the trust decision sits with the team installing it, not with PortSwigger.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026