Cyber Risks · PortSwigger Research

Request Randomizer

Summary: PortSwigger's BApp Store lists Request Randomizer, a Burp Suite extension by Thomas Patzke, version 1.3, that registers a session handling rule placing a random value into a specified location within requests. The listing was last updated on 21 December 2018 and rates the extension's overall system impact as low, with PortSwigger stating it makes no warranty about the quality or usefulness of third-party extensions.

What you should know: This extension has sat unupdated since December 2018, and PortSwigger explicitly disclaims any warranty on third-party BApps - so any team still running it in Burp is carrying an eight-year-old, unsupported component inside its testing toolchain.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related