Add Custom Header

Summary: PortSwigger's BApp Store lists a Burp extension by Lorenzo Grespan, version 1.1, that adds or updates custom HTTP headers from session handling rules, with support for hard-coded or dynamic values and a stated focus on JSON Web Tokens. The listing, last updated 08 July 2020, rates its overall system impact as Low and notes that extensions are written by third-party Burp users with no warranty from PortSwigger.
What's compelling: The tool that rewrites your session headers is a third-party extension PortSwigger explicitly does not vouch for, so the trust decision sits with whoever installs it into the scanner.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026