Yara
Summary: A third-party Burp extension by Ian Duffy, version 1.0, lets users run on-demand Yara scans of websites inside the Burp interface using custom Yara rules they write or obtain, with example uses including scanning spidered sites for obfuscated JavaScript or other string patterns in any part of a request or response. It was tested with Yara 3.4 on Windows 7 and 10 and Kali 2.0, requires the standalone Yara 3.4 binary and Jython 2.7 or later, and was last updated 25 January 2017.
Key Takeaway: PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so the tooling a tester relies on for pattern matching in requests and responses carries no vendor guarantee, and this one has not been updated since January 2017.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026