Cyber Risks · PortSwigger Research

Reflected File Download Checker

Summary: PortSwigger's BApp Store lists a Burp Suite extension called Reflected File Download Checker, authored by Onur Karasalihoglu at version 1.0 and last updated 24 January 2017, which checks for reflected file downloads. The listing rates its overall system impact as Low and notes that extensions are written by third-party Burp users, with PortSwigger making no warranty about their quality or usefulness.

Key Takeaway: This checker has not been updated since January 2017, so any reflected file download coverage it provides rests on nearly a decade-old logic running inside the tool your testers rely on.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related