Custom Deserializer
Summary: CustomDeserializer is a Burp Suite extension by Marco Tinari, version 1.1a and last updated 21 February 2022, that performs custom deserialization to speed up manual testing of web applications. It adds an editor tab for decoding and encoding parameters on the fly and integrates with Burp Scanner and Intruder for automation, with an estimated overall system impact rated Low.
Key Takeaway: The extension is third-party code that PortSwigger explicitly does not warrant for quality or usefulness, so a tester running it inside Burp is trusting an outside author's deserialization handling against live application traffic.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026