Cyber Risks · PortSwigger Research

Manual Scan Issues

Summary: PortSwigger's BApp Store lists a third-party Burp Suite extension, Manual Scan Issues, that lets users manually create custom issues within Burp Scanner results with the same properties as a native Burp issue. The extension is authored by Joshua Smith and Benjamin Wireman of Dynetics, is at version 1.0.3, was last updated 23 May 2017, and carries an overall system impact rating of Low.

Why it matters: The extension's stated premise is that Burp cannot find everything and some tasks must be completed by a user, so the findings your scanner reports may depend on manual entry by whoever is running it. PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, and this one has not been updated since May 2017.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related