Cyber Risks · PortSwigger Research

Request Minimizer

Summary: PortSwigger's BApp Store lists Request Minimizer, a Burp Suite extension by George Noseevich (version 1.3.2, last updated 20 December 2022) that strips HTTP request parameters judged irrelevant, such as random ad cookies and cachebusting nonces. It adds "Minimize in current tab" and "Minimize in new tab" actions to the Repeater context menu, and after removing each parameter it repeats the request to confirm the response still matches, keeping only parameters that do not affect the response.

Bottom line: The extension's safety rests entirely on response comparison, so a parameter that changes behavior only under conditions the test request doesn't trigger can be dropped without notice. PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions for any particular purpose.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related