HTTP Mock
Summary: PortSwigger's BApp Store lists an extension called HTTP Mock, version 1.1.7, that serves customizable mock responses based on real ones, with requests matched by customizable regex rules and forwarded to a local mock server. Written by Michal Dardas and Shea Polansky and last updated 28 June 2022, it lets testers see how web frontend and mobile clients react to different responses without changing the backend.
What's compelling: The extension is third-party code that PortSwigger explicitly makes no warranty about for quality or usefulness, and it was last updated in June 2022 - so a team relying on it is running an unmaintained tool inside Burp against live client traffic.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026