PsychoPATH

Summary: PsychoPATH is a Burp Suite extension, authored by Julian Horoszkiewicz of Pentest Ltd, that provides a customizable payload generator for detecting file path vulnerabilities in file upload and download functionality. Version 1.1.1 was last updated on 28 June 2018, carries an overall system impact rating of Medium, and is installed through the BApp Store in Burp Extender or downloaded for offline installation.
Why it matters: The tool targets file path flaws in upload and download features, and its last update in June 2018 means any testing it supports rests on payloads that are roughly eight years old - a gap worth weighing against how much your file-handling code has changed since.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026