Configuring the Logger capture filter with scripts - Port Swigger
Summary: PortSwigger's documentation describes how Burp Suite users can apply Java-based scripts, called Bambdas, as custom capture filters in Logger, either by loading existing scripts from a personal Bambda library or writing new ones from built-in templates. Items not captured are discarded from Logger and cannot be retrieved even if the capture filter is later removed, and PortSwigger notes that capture filter scripts run against all outgoing HTTP messages and may slow Burp's performance.
Bottom line: The documentation states that filtered-out items are gone for good, so a misconfigured capture filter can silently destroy the traffic record a tester would need later, and resource-intensive Bambdas run against every outgoing HTTP message, slowing the tool itself.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026