Cyber Risks · PortSwigger Research

Request Timer

Summary: PortSwigger's BApp Store lists Request Timer, a Burp Suite extension by Nick Taylor that captures response times for requests made by all Burp tools, with results filterable by tool (Proxy, Scanner, Intruder, Repeater), target scope, and URL string match. Version 1.0.2 requires Java 8, was last updated 08 November 2017, and carries an overall system impact rating of Low.

What's compelling: The extension exists to surface potential timing attacks, but it was last updated in November 2017 and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions - so any timing signal you rely on from it rests on an unmaintained tool.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related