Backup Finder
Summary: PortSwigger's BApp Store lists Backup Finder, a Burp Suite extension by Moein Fatehi (version 0.2, last updated 04 August 2022) that reviews backup, old, temporary, and unreferenced files on a webserver for sensitive information. The author states that most available backup-finder tools rely only on static built-in dictionaries, while this extension generates dynamic payloads based on the target being tested, using data collected actively or passively in the target tab as its feed.
What you should know: The extension's own guidance says results depend on first crawling the domain and, where authentication is required, logging in and submitting forms to surface more files and directories - so the exposure it finds is bounded by how thoroughly someone maps the target first.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026