Payload Parser
Summary: PortSwigger's BApp Store lists Payload Parser, a Burp Suite extension by James Lester, version 1.0, last updated 01 July 2014, rated low for system impact. The extension lets a user configure a set of characters an application is known to sanitize and generate payload lists that exclude all of those characters or include at least one, with the lists saved for use in Burp Intruder.
What's compelling: The tool is built around the assumption that a target's sanitizer is known and consistent, so a payload list tuned to one character set can miss the bypass if the application's filtering differs from what the tester configured.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026