EsPReSSO
Summary: EsPReSSO is a Burp Suite extension, version 3.3.1, that processes and recognizes single sign-on protocols, with a stated capability for detecting supported protocols and attacking them. The BApp Store listing credits Tim Guenther, Christian Mainka, Vladislav Mladenov, Nurullah Erinola, Juraj Somorovsky and Nils Engelbe, was last updated on 24 June 2019, and carries an overall system impact rating of Medium.
What's compelling: A third-party SSO testing extension last updated in 2019 still sits in the BApp Store, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users - so the tooling pointed at your identity protocols carries its own unpatched risk.
Read the original at PortSwigger Research ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026