Cyber Risks · PortSwigger Research

Proxy Auto Config

Summary: PortSwigger's BApp Store lists a Burp Suite extension, version 0.1.0 by Jon Passki, that automatically configures Burp upstream proxies to match desktop proxy settings, including support for Proxy Auto-Config (PAC) scripts. It uses Proxy Vole to detect proxy settings and executes PAC scripts within a sandbox, with the listing last updated 24 October 2018 and an overall system impact rated Low.

What's compelling: This is a third-party extension from 2018 that PortSwigger explicitly does not warrant for quality or usefulness, and it runs PAC scripts inside your testing toolchain - so the sandbox and the extension's age are the details worth checking before it touches proxy configuration.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related