Intruder File Payload Generator
Summary: PortSwigger's BApp Store lists an extension called Intruder File Payload Generator, authored by Tiago Mendo at version 1.0, which lets Burp Intruder use file contents and filenames as payloads. The listing states it requires Java version 7, was last updated on 02 September 2015, and carries an overall system impact rating of Low.
Bottom line: The extension is third-party code that PortSwigger explicitly does not warrant for quality or usefulness, and it has sat unupdated since 2015 while still requiring Java 7 - a combination worth weighing before anyone installs it into a testing environment.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026