Cyber Risks · PortSwigger Research

Burp extensions added to Burp Suite Enterprise Edition

Summary: PortSwigger's 2021.8 release of Burp Suite Enterprise Edition adds support for Burp extensions, including 11 Java-based BApp extensions available for integration at launch. Extensions are downloaded from the BApp Store and uploaded manually rather than through an in-product store, because many organizations air-gap their Enterprise Edition deployments, and each extension must be assigned to a site before future scans of that site use it.

Key Takeaway: The manual upload path exists because customers air-gap Enterprise Edition, so extension management becomes a controlled, permissioned task rather than a click in an app store - and PortSwigger gates who can install and use extensions through role-based access control.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related