Cyber Risks · PortSwigger Research

Intruder Time Payloads

Summary: PortSwigger's BApp Store lists a Burp Suite extension called Intruder Time Payloads, authored by Andrew Whitmer at version 1.0, which lets users include the current epoch time in Intruder payloads. The listing was last updated on 24 January 2017, carries an estimated overall system impact of Low, and notes that extensions are written by third-party Burp users with no warranty from PortSwigger Web Security.

What you should know: This is a third-party extension last updated in January 2017, and PortSwigger states plainly that it makes no warranty about the quality or usefulness of extensions written by outside users - so anyone running it in Burp is carrying an eight-year-old, unwarranted component in their testing toolchain.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related