Cyber Risks · PortSwigger Research

Wordlist Extractor

Summary: Wordlist Extractor is a Burp Suite extension, authored by Patrick Grech of Secarma Ltd. and listed at version 1.0, that scrapes all unique words and numbers for use with password cracking. The BApp Store entry was last updated 20 April 2017 and rates its overall system impact as low.

Why it matters: A third-party Burp extension whose stated purpose is harvesting unique words and numbers for password cracking has sat unchanged since April 2017, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related