Token Extractor
Summary: PortSwigger's BApp Store lists Token Extractor, a Burp Suite extension by Will Strei, version 1.3.2a, last updated 10 February 2022, that extracts tokens from a response and replaces them in requests. The listing says it is useful for anti-CSRF tokens, updated expiration times, and sessions held in an authorization header, and notes PortSwigger makes no warranty about third-party extensions' quality or usefulness.
Key Takeaway: This is a third-party extension last updated in February 2022, and PortSwigger explicitly disclaims any warranty on its quality or usefulness - so the tooling your testers load into Burp carries its own unverified supply-chain and maintenance risk.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026