Burp Smart Buster
Summary: BurpSmartBuster is a Burp Suite extension by Patrick Mathieu, version 0.4, that discovers hidden files, directories and information by drawing on words in pages, the domain name, the current directories and filenames rather than relying on a static dictionary brute-force list. The BApp Store listing, last updated 22 January 2018, rates its estimated system impact as low and notes that PortSwigger makes no warranty about third-party extensions' quality or usefulness.
What you should know: The tool that finds your unlinked files and directories is a third-party extension PortSwigger explicitly does not vouch for, and its last update was 22 January 2018 - so the content it surfaces is only as current as the wordlists and logic baked in years ago.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026