Cyber Risks · PortSwigger Research

Peach API Integration

Summary: PortSwigger's BApp Store lists a third-party extension called Peach API Security integration, version 1.0.0, authored by Peach Tech and last updated 04 September 2019, which performs tests and views results from within Burp. PortSwigger states that extensions are written by third-party users of Burp and that it makes no warranty about their quality or usefulness for any particular purpose.

What you should know: This extension has not been updated since September 2019, and PortSwigger explicitly disclaims any warranty on third-party BApps, so the security of the tool rests with Peach Tech rather than the vendor whose scanner it plugs into.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related