Cyber Risks · PortSwigger Research

Browser Repeater

Summary: PortSwigger's BApp Store lists Browser Repeater, a Burp Suite extension by Nadeem Douba (version 0.1, last updated 01 July 2014) that renders Repeater responses in a real Firefox browser via the Selenium automation framework. The extension automates Burp's 'Show Response In Browser' feature to ease pen-testing of JavaScript-rendered pages, and carries a known issue: if an operator manually accepts a JavaScript alert box, Selenium ceases operation and the extension deadlocks until the browser is closed and the extension restarted.

Why it matters: This is a third-party extension at version 0.1, unchanged since July 2014, and PortSwigger states it makes no warranty about the quality or usefulness of extensions written by third-party users of Burp. A deadlock that requires manually closing the browser and restarting the extension is the kind of failure a testing team discovers mid-engagement.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related