Cyber Risks · PortSwigger Research

Target Redirector

Summary: PortSwigger's BApp Store lists Target Redirector, a Burp Suite extension by Paul Taylor of Foregenix Ltd, version 1.1, last updated 04 April 2018, that redirects requests to a chosen target by replacing an incorrect target hostname or IP with the intended one, optionally updating the Host header. PortSwigger states the extension is written by third-party Burp users and that it makes no warranty about their quality or usefulness for any particular purpose.

Bottom line: This is a third-party extension last updated in April 2018 that rewrites the target host and can also rewrite the Host header, and its distributor explicitly disclaims any warranty over third-party code - so the trust decision sits with the team installing it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related