BChecks: Houston, we have a solution!
Summary: PortSwigger released BChecks into beta, a scripting language for Burp Suite Professional that lets users build custom scan checks on the existing scanning engine faster than writing a BApp extension. The post illustrates the language with an example BCheck for CVE-2001-0537, an authentication bypass affecting Cisco IOS 11.3 to 12.2 that allowed command execution at the highest privilege level over HTTP, and points to a GitHub repository of example checks from PortSwigger and the community.
Why it matters: A custom scan configuration can be set to run only BChecks during the audit phase, so the checks your team writes determine what the scanner finds - and what it never looks for.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2001-0537
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026