Cyber Risks · PortSwigger Research

Postman Integration

Summary: PortSwigger's BApp Store lists a Burp extension, version 2.0 by Teruhiro Tagomori of NRI SecureTechnologies, that generates a Postman collection JSON file from selected requests. Users select requests, choose "Export as Postman Collection" from the context menu, and configure the output in a dialog before generating the file. The extension was last updated 07 September 2022 and is rated low for overall system impact.

What you should know: The extension is third-party code that PortSwigger explicitly does not warrant for quality or usefulness, and it has not been updated since September 2022 - so a tool that touches your captured request data carries an unmaintained supply-chain exposure.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related