Blazer
Summary: Blazer is a Burp Suite extension, authored by Luca Carettoni at version 0.3, that generates and fuzzes custom AMF messages for security testing. It implements an automated gray-box testing approach introduced at Black Hat USA 2012, aimed at improving the coverage and effectiveness of fuzzing against complex applications, and was last updated on 01 February 2017.
Why it matters: The tool's last update was February 2017, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions - so any team still relying on it is running a nearly decade-old testing component against current targets.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026