Length Extension Attacks
Summary: PortSwigger's BApp Store lists a Burp extension by Luis Felipe Teixeira, version 0.0.1, that performs hash length extension attacks on weak signature mechanisms. The listing was last updated on 25 January 2017 and rates the extension's overall system impact as Low.
Why it matters: The extension targets signature schemes built on hashes vulnerable to length extension, a class of weakness that lets an attacker append data to a signed message without the key. PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so any use in a testing program rests on your own review.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026