Cyber Risks · PortSwigger Research

Software Version Reporter

Summary: The Software Version Reporter is a Burp Suite extension, version 2.0.4 by August Detlefsen, that passively detects server software version numbers during scanning and spidering. It loads match rules from a remote tab-delimited file at startup, and users can also supply their own rules from a local file or through the BApp GUI.

Bottom line: The extension exists because server versions are often revealed only on error responses that normal testing may never surface, so version disclosure can sit unnoticed until someone probes the right failing request. PortSwigger states the extension is written by a third party and makes no warranty about its quality or usefulness.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related