Response Pattern Matcher
Summary: PortSwigger's BApp Store lists a third-party Burp extension called Response Pattern Matcher, version 2.0.1, last updated 15 August 2023, which uses a list of payloads to pattern match on HTTP responses and flag potentially vulnerable areas. The description says it can search HTML source for keywords, developer comments, passwords, admin panel links, and hidden form fields, and the usage tips warn that setting /* as a regex will most likely crash Burp because it matches on everything.
Key Takeaway: The extension is written by a third-party user, and PortSwigger states it makes no warranty about its quality or usefulness, so the tool scanning your responses for passwords and admin links carries no vendor assurance behind it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026