Adding extension scan checks to scans - Port Swigger
Summary: PortSwigger's Burp Scanner now runs scan checks created by extensions alongside its built-in checks during the audit, for both web application and API-only scans. Loading an extension automatically enables its scan checks in the scan launcher, where they can be toggled in bulk under the Extension tab of the Audit configuration settings.
Why it matters: Every extension you load into Burp can add its own active, passive, or unspecified checks that run during audits, and the only way to disable checks from a specific extension is to disable the extension itself.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026