Cypher Injection Scanner
Summary: A Burp Suite extension called Cypher Injection Scanner, authored by Morkin1792 and last updated 26 August 2021, detects Cypher code injection in applications using Neo4j databases. Its active scanner sends payloads designed to trigger requests to the Burp Collaborator Client, while its passive scanner alerts when the application returns descriptive errors.
Why it matters: Cypher injection targets the graph database layer, and this extension's passive detection depends on an application leaking descriptive errors - so an app that suppresses error detail gives you no alert at all.
Read the original at PortSwigger Research ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026