Cyber Risks · PortSwigger Research

Quoted-Printable Parser

Summary: PortSwigger lists a Burp Suite extension by author Hx01, version 1.0, that parses Content-Transfer-Encoding: quoted-printable emails received in Burp Collaborator's SMTP, decoding pasted encoded data when the user hits the Decode button. The listing was last updated 25 August 2020 and rates overall system impact as Low, with PortSwigger stating it makes no warranty about third-party extensions' quality or usefulness.

What's compelling: Quoted-printable encoding is a standard way to obscure content in email, so a tool that decodes it in one step shortens the path from an SMTP interaction in Collaborator to readable text. The extension is third-party code from 2020 that PortSwigger explicitly does not vouch for, which matters if it is installed into the same Burp instance your testers rely on.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related