Exif Tool Scanner
Summary: The ExifTool Scanner is a Burp Suite extension, version 1.0.9 by Michal Dardas, that reads metadata from filetypes including JPEG, PNG, PDF, DOC and XLS using ExifTool. It presents results as Passive scan issues and Message editor tabs, and embeds Windows, Linux and macOS binaries at version 12.25, with other versions usable via the system path.
What's compelling: Metadata pulled from uploaded files can expose author names, software versions and document history that never appear in the response body your team reviews. PortSwigger states the extension is written by a third party and makes no warranty about its quality or usefulness, so the tooling reading that metadata carries its own trust question.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026