Cyber Risks · PortSwigger Research

Log Viewer

Summary: PortSwigger's BApp Store lists Logs, a Burp Suite extension by author Ax that loads Burp's own log files into Burp so a specific request can be sent to Repeater for further attacks or analysis. Burp's logging options under Project Options > Misc > Logging can record every HTTP request and response per-tool or for all Burp traffic, and the extension is at version 2.0, last updated 28 January 2022, with an overall system impact rated Low.

Bottom line: The extension is third-party code that PortSwigger explicitly makes no warranty about, and it was last updated in January 2022 - so a tool that ingests your complete session logs, including every request and response Burp recorded, is running on code nobody has refreshed in years.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related