Import To Sitemap
Summary: The Import to Sitemap extension for Burp Suite, authored by NCC Group and last updated 17 January 2023, adds a tab that loads a CSV file into Burp's sitemap. It includes an "Enable Fakeparam Trick" checkbox, on by default, that appends an artificial parameter named "wstalkerfakeparam" to each request so that sitemap does not drop requests sharing the same URL.
Bottom line: The extension is third-party code that PortSwigger states it makes no warranty about, and its default behavior silently alters every request it imports by adding a parameter - a detail worth knowing before that traffic reaches a target.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026