Cyber Risks · PortSwigger Research

Handy Collaborator

Summary: Handy Collaborator is a Burp Suite extension by Federico Dotta and Gianluca Baldi, version 0.2a, that generates Collaborator payloads from the contextual menu of editable tabs such as Repeater and Intercept. A separate thread periodically checks all DNS, HTTP and SMTP interactions received by the Collaborator for those payloads and, when an interaction is found, adds an issue with the details to the target host.

Bottom line: Polling can be disabled for testing on a private network with no Internet connection and re-enabled later to check for past interactions, so the tool's coverage depends on a setting a tester can turn off.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related