The Curious Engineer

PortSwigger

2014–2026

150 posts

2026 29

October 2026

  1. Active Scan++

September 2026

  1. History Explorer
  2. JWT Editor

August 2026

  1. HTTP History to PCAP
  2. Can AI Do Novel Security Research? Meet the HTTP Terminator James Kettle Black Hat USA 2026 · August 5, 2026 DEF CON 34 · August 7, 2026
  3. CSS: the bomb inside your inbox Gareth Heyes Black Hat USA 2026 · August 5, 2026
  4. Param Miner

July 2026

  1. CKEditor Passive Scanner
  2. Extensibility Helper
  3. Copy as X8 Command
  4. OWASP API Security Top 10 Scanner
  5. PwnFox For Chromium

June 2026

  1. Stepper
  2. MCP Server Scanner
  3. Qualys WAS

May 2026

  1. Asset Saver

April 2026

  1. Swapper
  2. Host Header Inchecktion
  3. Sharpener

March 2026

  1. Quick Update Headers
  2. Copy as Python aiohttp

February 2026

  1. Saver Logger
  2. Copy Request Response
  3. InQL - GraphQL Scanner
  4. Burp Variables

January 2026

  1. BubblePop - Bubble.io ElasticSearch Decryptor
  2. API Workflow Manager
  3. PyCript
  4. DNS Exfilnspector

2025 27

December 2025

  1. Session Keeper
  2. AutoVader
  3. BeanStack - Stack-trace Fingerprinter
  4. Magic Variables

November 2025

  1. Hotpatch

October 2025

  1. Brida, Burp to Frida Bridge

September 2025

  1. WebSocket History Exporter
  2. JWT Monitor
  3. HARBringer, HAR Importer
  4. IP Rotate
  5. Deep Data Injector

August 2025

  1. Collaborator Everywhere
  2. Twilio OTP Authenticator

July 2025

  1. PDF Render
  2. Passkey Raider
  3. Java Object Deserializer
  4. UnUnicode

June 2025

  1. AWS cURL Command

April 2025

  1. Raw Hex'ler
  2. 429 Bypasser

February 2025

  1. HTML Content Extractor

January 2025

  1. JavaScript Encode As
  2. Proxy Enriched Sequence Diagrams Exporter
  3. Bypass Bot Detection
  4. Customizer
  5. Trusted Types Checker
  6. AI HTTP Analyzer

2024 4

October 2024

  1. Header Guardian
  2. Look Over There

September 2024

  1. Padding Oracle Hunter

July 2024

  1. Bulk Send to Repeater

2023 9

December 2023

  1. AWS Cognito

October 2023

  1. Socket Sleuth

September 2023

  1. Conditional Match and Replace
  2. WAF Bypadd

August 2023

  1. Error Message Checks

July 2023

  1. JS Miner
  2. Logger++

June 2023

  1. CSurfer

January 2023

  1. OAuthv1 Authentication

2022 20

December 2022

  1. WebAuthn CBOR Decoder

October 2022

  1. Paramalyzer

September 2022

  1. 403 Bypasser

August 2022

  1. Backup Finder

July 2022

  1. Burp2Telegram

June 2022

  1. HTTP Mock
  2. CORS*, Additional CORS Checks

February 2022

  1. Cloud Storage Tester
  2. BurpelFish
  3. Timeinator, Time Based Attacker
  4. Add & Track Custom Issues
  5. SSL Scanner
  6. Proxy Action Rules
  7. LightBulb WAF Auditing Framework
  8. CSP Auditor
  9. Non HTTP Proxy (NoPE)
  10. JVM Property Editor
  11. Java Deserialization Scanner
  12. Burp Share Requests

January 2022

  1. Log Viewer

2021 16

December 2021

  1. Log4Shell Everywhere
  2. Attack Surface Detector
  3. Retire.js
  4. Image Metadata
  5. UPnP Hunter

November 2021

  1. Copy as PowerShell Requests

October 2021

  1. AuthMatrix

August 2021

  1. PHP Object Injection Check
  2. WAFDetect
  3. Image Size Issues
  4. San Scanner

May 2021

  1. HTTP Methods Discloser

March 2021

  1. NTLM Challenge Decoder
  2. Timestamp Editor

February 2021

  1. Decoder Improved
  2. Clipboard Repeater

2020 4

October 2020

  1. Hashcat Maskprocessor Intruder Payloads

July 2020

  1. Hunt Scanner

March 2020

  1. Quicker Context
  2. Progress Tracker

2019 8

October 2019

  1. Scope Monitor

September 2019

  1. JavaScript Security
  2. JS Link Finder

August 2019

  1. GraphQL Raider
  2. iRule Detector

July 2019

  1. pip3line
  2. SRI Check

April 2019

  1. Nessus Loader

2018 9

December 2018

  1. Request Randomizer
  2. Detect Dynamic JS
  3. Multi-Browser Highlighting
  4. Additional CSRF Checks

July 2018

  1. Request Highlighter

June 2018

  1. Command Injection Attacker
  2. Code Dx

January 2018

  1. WAF Cookie Fetcher
  2. Session Tracking Checks

2017 16

October 2017

  1. CMS Scanner
  2. Multi Session Replay
  3. Fast Infoset Tester

June 2017

  1. ExtendedMacro
  2. WCF Deserializer

May 2017

  1. Manual Scan Issues

April 2017

  1. Wordlist Extractor
  2. Pcap Importer

February 2017

  1. JSWS Parser

January 2017

  1. ThreadFix
  2. 11e2ec6923f2497db9c18ec92492c63a
  3. 16ac195454f8429baac1c5357b0d3952
  4. Reflected File Download Checker
  5. BApp Store
  6. Burp Chat
  7. NMAP Parser

2015 4

September 2015

  1. PDF Viewer

August 2015

  1. Burp-hash

March 2015

  1. Burp CSJ

February 2015

  1. WebSphere Portlet State Decoder

2014 4

July 2014

  1. Browser Repeater
  2. SAML Editor
  3. Random IP Address Header
  4. 4316cc18ac5f434884b2089831c7d19e