Headless Burp
Summary: PortSwigger's BApp Store lists Headless Burp, an extension by Anand Sudhir Prayaga and Rita Nordtug that runs Burp Suite's Spider and Scanner tools in headless mode from the command line. The listing is version 1.0, last updated 09 July 2018, with an estimated overall system impact rated Low.
Bottom line: The extension is a third-party BApp that PortSwigger explicitly does not warrant for quality or usefulness, and its last update was in 2018 - so anyone scripting Burp's scanner into a pipeline is relying on code nearly a decade old.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026