Cyber Risks · PortSwigger Research

Para Forge

Summary: ParaForge is a Burp Suite extension, version 0.1 by Sourav Kalal/AnoF, that extracts parameters and endpoints from requests to build custom wordlists for fuzzing and enumeration. It was last updated on 23 November 2023, carries an overall system impact rating of Low, and is distributed through the BApp Store as a third-party extension PortSwigger makes no warranty about.

Why it matters: This is a third-party BApp with a Low impact rating and a version 0.1 label, installed inside the same Burp instance your testers use against production targets - so the extension's provenance and code are worth checking before it touches live requests.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related