Spy Dir
Summary: SpyDir is a Burp Suite extension, authored by Ryan Reid at version 0.8.5, that enumerates endpoints within a web application via a local source code repository. The BApp Store listing, last updated 17 July 2018, rates its estimated system impact as low and notes that PortSwigger makes no warranty about the quality or usefulness of third-party extensions.
What you should know: The tool that maps your application's endpoints from source code was last updated in 2018, and its own distributor disclaims any warranty on quality or fitness - so the inventory it produces is only as current as the repository it reads.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026