Cyber Risks · PortSwigger Research

Pcap Importer

Summary: The Pcap Importer is a Burp Suite extension, authored by Stephen Tomkinson of NCC Group and listed at version 1.4, that imports Pcap and Pcap-NG files into the Burp Target site map for passive scanning. It adds an "Open Pcap file..." option to the Target tab context menu, intended for cases where an HTTP client does not support proxying but the traffic still needs to be scanned, inspected, or replayed.

What's compelling: Traffic from clients that can't be proxied is traffic your scanner never sees, and this extension's last update was 04 April 2017 - so a security leader relying on it should weigh how much unproxied HTTP still moves across the estate against a third-party extension PortSwigger explicitly makes no warranty about.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related