Cyber Risks · PortSwigger Research

JSWS Parser

Summary: PortSwigger's BApp Store lists a Burp extension called JSWS Parser, authored by Ken Johnson at version 1.0, that parses a response containing a JavaScript Web Service Proxy and generates JSON requests for all supported methods. The listing was last updated 15 February 2017 and rates its overall system impact as low, with PortSwigger noting that extensions are written by third-party Burp users and carry no warranty of quality or usefulness.

Why it matters: This is a third-party extension last updated in February 2017, so any team still relying on it is running code in Burp that PortSwigger explicitly does not vouch for and that has had nearly a decade without an update.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related