Managing extensions in Burp Suite DAST - Port Swigger
Summary: PortSwigger's documentation describes how users with extension-management permission view, update, and delete extensions in Burp Suite DAST through the Extension library, which separates BChecks, BApps, and custom extensions into tabs. Custom extensions must be JAR files and BChecks must use the .bcheck extension, BApps update automatically when a new version reaches the BApp Store, and deleting an extension removes it from every site it was applied to while any scan already in progress keeps using it until it finishes.
What's compelling: Deleting an extension strips it from every site it was applied to, but a scan already running keeps using it until it completes - so a removal made during an active scan does not take effect everywhere at once.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026