Pentest Mapper
Summary: Pentest Mapper is a Burp Suite extension, version 1.7.3 and last updated 23 November 2023, that integrates Burp's request logging with a custom application testing checklist. It lets testers map application flows and connect each flow or API call to a function name and to vulnerabilities in the checklist, with a demo checklist available as a CSV file.
What's compelling: The extension is written by third-party users Sourav Kalal/AnoF, and PortSwigger states it makes no warranty about its quality or usefulness for any particular purpose - so a team adopting it is relying on an unvetted tool inside the same Burp instance that handles live request data.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026