Introducing the BApp Store
Summary: PortSwigger's Burp Suite release adds the BApp Store, a catalog of user-written Burp extensions that can be installed with one click from within Burp or downloaded from the BApp Store website for manual installation on machines without an Internet connection. All BApps are free, users can rate them and see aggregated ratings, and PortSwigger says it may support paid-for BApps in future but has no current plans to do so.
Key Takeaway: Extensions that hook into a security team's scanning tool are code running inside the tool, and this store makes installing them a one-click action for any Burp user on staff - with ratings, not review, as the quality signal.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026