Cyber Risks · PortSwigger Research

Copy to BCheck

Summary: PortSwigger lists a third-party Burp extension called Copy to BCheck, authored by Matheus Vrech at version 1.1 and last updated 28 July 2023, that formats requests copied from the Repeater tool into bcheck scripts. The extension generates only simple bcheck scripts based on a few of PortSwigger's example scripts, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions.

Why it matters: The tooling that turns a pentester's manual findings into repeatable scanner checks is a third-party add-on PortSwigger explicitly does not vouch for, and it covers only a few example script patterns - so the coverage gap between what a tester finds by hand and what your scanner can re-test automatically stays wide.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related