Paramalyzer
Summary: Paramalyzer is a Burp Suite extension, version 2.2.2 by Jason Gillam and last updated 25 October 2022, that performs in-depth parameter analysis on all in-scope Burp traffic during web penetration tests. It displays results in an interactive table that can be sent to other Burp tools such as Repeater, and it supports tasks including identifying sensitive data, identifying hash algorithms, decoding parameters, and determining which parameters are reflected in the response.
What's compelling: The extension requires Java version 7 and is third-party code that PortSwigger states it makes no warranty about regarding quality or usefulness, so a team relying on it in client engagements is trusting an unmaintained-since-2022 tool inside the same Burp instance that holds in-scope traffic.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026