Token Jar
Summary: TokenJar is a Burp Suite extension, authored by Dan Negrea and listed at version 2.2, that manages tokens such as anti-CSRF values, CSurf tokens, and session IDs. It sets parameters requiring random numbers or values computed from application responses, with multiple parameter choices and scoping to different tools, and was last updated 09 June 2022.
What's compelling: The extension is third-party code that PortSwigger explicitly does not warrant for quality or usefulness, and its last update was June 2022 - so a security team relying on it to handle session IDs and anti-CSRF tokens is trusting unmaintained code inside its testing toolchain.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026