Debugging Burp extensions with a remote debugger - Port Swigger
Summary: PortSwigger published a guide on using a remote debugger to inspect Burp extensions as they run inside Burp Suite, covering breakpoints, call stacks and variables, and code modification. The guide describes setting conditional and logging breakpoints, rebuilding and reloading the extension so IDE source matches the compiled code Burp runs, and removing active breakpoints afterward because they can affect extension performance.
What's compelling: The guide notes that active breakpoints left in code can degrade an extension's performance, a concrete cost for anyone shipping extensions to the BApp store's community of 80,000+ testers.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026