Google Hack

Summary: PortSwigger's BApp Store lists a Burp Suite extension by James Lester, version 1.0, that provides a GUI for setting up and running Google Hacking queries and adding results directly to Burp's site map. The listing was last updated on 01 July 2014 and carries an overall estimated system impact of High, with PortSwigger stating it makes no warranty about third-party extensions' quality or usefulness.
Why it matters: A search-engine query tool that drops findings straight into a site map is a reconnaissance shortcut, and it has sat unupdated since 2014 while carrying a High system-impact rating - an old, third-party component in the toolchain that nobody has revisited in over a decade.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026