Cyber Risks · PortSwigger Research

Elastic Burp

Summary: ElasticBurp is a Burp Suite extension, authored by Thomas Patzke at version 1.4 and last updated 04 October 2018, that stores requests and responses from selected Burp tools in an ElasticSearch index along with metadata such as headers and parameters. This lets a Burp user run extended searches, such as "POST requests where parameter csrftoken is not set" or "Responses with missing header x-content-type-options".

Key Takeaway: PortSwigger states that extensions are written by third party users of Burp and that it makes no warranty about their quality or usefulness, so a tool that indexes your captured request and response traffic in ElasticSearch carries that caveat along with whatever data it stores.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related