Cyber Risks · PortSwigger Research

Sample Burp Suite extension: event listeners

Summary: PortSwigger published a sample Burp Suite extension that demonstrates registering listeners for various runtime events, printing a message to its output stream when an event occurs. The documentation notes that registering an extension state listener is particularly important for extensions that start background threads or open system resources such as files or database connections, so the extension can terminate threads and close resources when the user unloads it.

What's compelling: An extension that opens files or database connections and starts background threads without an unload listener leaves those resources running after the user removes it from the Burp UI, which is why the sample treats cleanup on unload as required practice rather than optional.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related