Cyber Risks · PortSwigger Research

Directory Importer

Summary: PortSwigger's BApp Store lists Directory Importer, a Burp Suite extension by Tanner Barnes that imports directory bruteforcing results into Burp for further analysis instead of proxying bruteforcing tools through Burp to catch results. Version 1.0, last updated 13 June 2019, is modularized so new parsers extend BaseParser and implement the parseDirectory method, which takes a line from a bruteforce tool's output file and returns a URL for Burp to use.

Why it matters: The extension carries a low overall system impact rating and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so the tooling a tester loads into Burp is their own risk decision.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related