Sample Burp Suite extension: Hello World
Summary: PortSwigger published a sample Burp Suite extension called Hello World, dated 13 December 2012, that demonstrates setting the extension name shown in the UI, obtaining extension-specific output and error streams, writing messages to those streams and to the main Burp alerts log, and generating an exception to show how errors are reported to the user. The download includes source code for Java and Python plus the compiled JAR file for Java.
Why it matters: This is developer documentation for a starter extension, not a vulnerability or incident report, so the stake for a security leader is limited to knowing what a Burp extension can do inside the tool - write to logs and raise errors surfaced to the user - when reviewing extensions your testers install.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026