Decompressor
Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension called Decompressor, version 1.2, last updated 19 June 2018, which opens compressed HTTP request and response bodies in a new tab so they can be viewed and modified. Using it requires disabling Burp's default unpacking of gzip and deflate in both requests and responses, and it requires Java version 8.
Key Takeaway: Burp decompresses message bodies by default but does not recompress them before forwarding, which breaks clients such as fat clients using RMI over HTTP that expect a fixed content-encoding - and this extension, a third-party tool PortSwigger makes no warranty about, has not been updated since 2018.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026