Some of the best Burp extensions - as chosen by you
Summary: PortSwigger Research rounded up five community-favored Burp extensions after HackerOne's Ben Sadeghipour (@NahamSec) asked the Burp Suite community on Twitter for their favorites. The list names Autorize by Barak Tawily for testing authentication vulnerabilities, Turbo Intruder and Param Miner by James Kettle for high-speed automated attacks and finding hidden unlinked parameters in web cache poisoning work, Hackvertor by Gareth Heyes for tag-based escapes and encodings, and Burp Bounty by Eduardo Garcia for building custom scan checks in Burp Scanner.
Why it matters: These five extensions come from a community poll rather than a vendor benchmark, so the tools your testers reach for may differ from what peers name - and Param Miner's focus on unlinked parameters points at web cache poisoning paths that standard scan checks may not cover.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026