[V13P] Scripts and comments search
Summary: PortSwigger added a search feature to Burp Suite Pro that scans part or all of the site map for scripts and comments, accessed by selecting branches in the site map and using the context menu. Results appear in a window showing responses from all Burp tools containing scripts or comments, with a preview pane that highlights and extracts relevant items and an export button that can save them to file or clipboard with optional deduplication.
What you should know: The feature targets teams that were grepping Burp's log files to pull scripts and comments out of responses, so the exposure a security leader should weigh is what those extracted scripts and comments reveal about their own applications.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026