What's new with BChecks?
Summary: PortSwigger released updates to BChecks, its scripting language for building custom scan checks in Burp Suite, adding syntax highlighting and a testing tool that runs specific requests and responses against a BCheck in a simulated environment. The company also pointed users to a catalog of community-submitted BChecks in its official GitHub repository, reachable through a new clickable GitHub icon in the BChecks tab, and to a BApp extension called 'BCheck Helper' that downloads and installs BChecks from a configured GitHub repository or local file system.
What's compelling: The update targets the feedback loop that previously forced users to set up a custom scan configuration and kick off an audit task just to find a missed keyword on line 78 of a BCheck - a testing tool now checks behavior in a simulated environment instead.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026