Route VulScan
Summary: RouteVulScan is a Java-based Burp plug-in, version 1.4 and last updated 08 March 2023, that recursively detects vulnerable paths through passive scanning and matches package keywords using configurable regular expressions. Detected URLs are printed in Output, duplicate URLs are skipped and logged in Errors, and URLs matching the Config rules are stored in the VulDisplay panel.
Key Takeaway: The extension is written by a third-party author, F6JO, and PortSwigger states it makes no warranty about its quality or usefulness, so a security team adding it to Burp is trusting code it did not write inside its scanning workflow.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026