Cyber Risks · PortSwigger Research

Headers Analyzer

Summary: PortSwigger's BApp Store lists a Burp Suite extension called Headers Analyzer, authored by Antonio Sanchez at version 0.1, which adds a passive scan check to report security issues in HTTP headers. The extension requires Jython 2.7, was last updated on 24 November 2014, and carries an estimated overall system impact of Low.

What you should know: This is a third-party extension last updated in 2014, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users of Burp - so any header findings it produces rest on code nobody has refreshed in over a decade.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related