Cyber Risks · PortSwigger Research

Response Grepper

Summary: PortSwigger's BApp Store lists Response Grepper, a Burp Suite extension by author b4dpxl that auto-extracts and displays values from HTTP response bodies using a per-request regular expression, similar to Burp Intruder's "Grep - Extract" but applied to any response. It extracts the full match plus any defined groups, including named groups, and shows them in a list on a new tab, with version 1.4.1a last updated 25 February 2022 and an overall system impact rated Low.

What's compelling: The extension is third-party code, and PortSwigger states it makes no warranty about its quality or usefulness for any particular purpose - a consideration for teams installing BApps into Burp.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related