Default profile inventory

Browse the reviewed pack by profile type, enabled state, tags and severity.

This is a metadata inventory of the local pack reviewed on 2026-10-04: 261 profiles, of which 256 are enabled and 5 disabled. It describes this pack, not the contents of an arbitrary running server or every future release.

Type	Profiles
Active	130
Passive response	90
Passive request	41

Use MCP list_profiles to discover the actual server catalogue, including disabled state and exact names. Pro's tables show the loaded local files. The machine-readable inventory also contains rule dependencies and a content fingerprint.

The inventory records available checks, not a claim that every detector is valid on every application. Review compatibility and test customizations. The supplied files stay in BurpBountyData/profiles; installing the documentation alone does not install the commercial pack.

Active profiles

Active profiles

Name	Enabled	Tags	Severity
Blind_RCE_Linux	Yes	All, RCE, Per-URL	High
Blind_RCE_Windows	Yes	All, RCE, Per-URL	High
Blind_XSS	Yes	All, XSS, Blind XSS, Per-URL	Medium
Blind_XXE	Yes	All, XXE, Per-URL	High
CORS Misconfiguration	Yes	All, CORS, Per-URL	Low
CouchDB_Admin_Exposure	Yes	All, CVEs, Per-Host	Medium
CRLF	Yes	All, CRLF, Per-URL	Medium
CVE-2017-9506_Jira_SSRF	Yes	All, CVEs, Per-Host	Medium
CVE-2018-1271_Spring_MVC_Path_Traversal	Yes	All, CVEs, Per-Host	High
CVE-2018-13379_FortiOS_Creds_Disclosure	Yes	All, CVEs, Per-Host	High
CVE-2019-11510_Pulse_Secure	Yes	All, CVEs, Per-Host	High
CVE-2019-11580_Atlassian_Crowd_RCE	No	CVEs, Per-Host, Manual-Review	High
CVE-2019-1653_Cisco_Wan_VPN_disclosure	Yes	All, CVEs, Per-Host	High
CVE-2019-19781_Citrix_ADC_Directory_Traversal	Yes	All, CVEs, Per-Host	Medium
CVE-2019-3799_Spring_Cloud_Path_Traversal	Yes	All, CVEs, Per-Host	High
CVE-2019-5418_Ruby on Rails	Yes	All, CVEs, Per-URL	High
CVE-2019-5418_Ruby on Rails - WAF bypass	Yes	All, CVEs, Per-URL	High
CVE-2019-8442_Jira_Path_Traversal	Yes	All, CVEs, Per-Host	Medium
CVE-2019-8449_Jira_Unauthenticated_Sensitive_Info	Yes	All, CVEs, Per-Host	Medium
CVE-2020-11738_Wordpress_Duplicator_Plugin_LFI	Yes	All, CVEs, Wordpress, Per-Host	High
CVE-2020-13167_Netsweeper_code_injection	No	CVEs, Per-Host, Manual-Review	Information
CVE-2020-13379_Grafana_SSRF	Yes	All, CVEs, Per-URL	High
CVE-2020-14179_Jira_Info_Exposure	Yes	All, CVEs, Per-Host	Medium
CVE-2020-14181_Jira_User_Enum	Yes	All, CVEs, Per-Host	Medium
CVE-2020-14815_XSS	Yes	All, XSS, Per-Host	Medium
CVE-2020-15129_Traefik_Open_Redirect	Yes	All, CVEs, Per-URL	Medium
CVE-2020-17506_Artica_Web_Proxy_Auth_Bypass	Yes	All, CVEs, Per-Host	Information
CVE-2020-24312_File_Manager_Wordpress_Backups	Yes	All, CVEs, Wordpress, Per-Host	High
CVE-2020-2551_Oracle_WebLogic	Yes	All, CVEs, Per-Host	Information
CVE-2020-3452_Cisco_ASA_LFI	Yes	All, CVEs, Per-Host	Medium
CVE-2020-5410_Path_Traversal_Spring_Cloud	Yes	All, CVEs, Per-Host	Medium
CVE-2020-5412_Spring_Cloud_Netflix	Yes	All, CVEs, Per-Host	High
CVE-2020-5777_MAMGI_Auth_Bypass	Yes	All, CVEs, Per-Host	Information
CVE-2020-5902_F5-BigIP	Yes	All, CVEs, Per-Host	High
CVE-2020-8209_Citrix_XenMobile_PathTraversal	Yes	All, CVEs, Per-Host	High
CVE-2020-8982_Citrix_ShareFile_File_Read	Yes	All, CVEs, Per-Host	Medium
CVE-2020-9484_Tomcat_Groovy	Yes	All, CVEs, Per-URL	Information
CVE-2021-26086_PathTraversal_Atlassian_Jira	Yes	All, CVEs, Per-Host	Medium
CVE-2021-40438_Apache_mod_proxy_SSRF	Yes	All, CVEs, Per-URL	High
CVE-2021-40539_Zoho_ManageEngine_ADSelfService	Yes	All, CVEs, Per-Host	High
CVE-2021-43798_Grafana_LFI	Yes	All, CVEs, Per-Host	High
CVE-2021-44228_RCE_Log4j	Yes	All, RCE, CVEs, Per-URL	High
CVE-2021-44228_RCE_Log4j_GETPOST	Yes	All, RCE, CVEs, Per-URL	High
CVE-2021-44228_RCE_Log4j_urlEncode	Yes	All, RCE, CVEs, Per-URL	High
CVE-2022-1388_F5_Big_IP_RCE	Yes	CVEs, RCE, All, Per-Host	High
CVE-2022-26134_Confluence_RCE	Yes	CVEs, RCE, All, Per-Host	High
CVE-2022-31474_BackupBuddy_LFI	Yes	CVEs, All, Per-Host	Medium
CVE-2022-32276_Grafana_8.4.3	Yes	CVEs, All, Per-Host	Information
CVE-2022-32276_Grafana_8.4.3_poc2	Yes	CVEs, All, Per-Host	Information
CVE-2022-42889_Text4Shell	Yes	All, CVEs, Per-URL	High
CVE-2023-24488_Citrix_XSS	Yes	All, Per-Host	Low
CVE-2025-55182_React2Shell_RCE	Yes	All, RCE, CVEs, React/Next.js, Per-Host	High
CVE-2025-55182_React2Shell_RCE_OOB	Yes	All, RCE, React/Next.js, CVEs, Per-Host	High
CVE-2025-55182_React2Shell_RCE_Windows	Yes	All, RCE, CVEs, React/Next.js, Per-Host	High
CVE-2025-68613_n8n_Vulnerable_Version	Yes	All, CVEs, RCE, n8n, Per-Host	High
Drupal_User_Enum	Yes	All, Drupal, Per-Host	Information
Drupal_User_Enum_Redirect	Yes	All, Drupal, Per-Host	Medium
DWR_enpoints	Yes	All, DRWuzz, Per-Host	Information
Easy_wp_smtp_listing_enabled	Yes	All, Wordpress, Per-Host	High
Echo_RCE	Yes	All, RCE, Per-URL	High
Expect_RCE	Yes	All, RCE, Per-URL	High
GitFinder	Yes	All, Fuzzing Files, Per-Host	Low
GraphQL Alias Overloading	Yes	All, GraphQL, Per-URL	Information
GraphQL Batching	Yes	All, GraphQL, Per-URL	Information
GraphQL Circular Queries	Yes	All, GraphQL, Per-URL	Information
GraphQL Directives Overloading	Yes	All, GraphQL, Per-URL	Information
GraphQL Field Duplication	Yes	All, GraphQL, Per-URL	Information
Graphql Introspection	Yes	All, Introspection, Per-URL	Low
Host_Header_Injection	Yes	All, Per-URL	High
Jira_unauthenticated_Info	Yes	All, CVEs, Per-Host	Medium
Kubernetes_API_Exposed	Yes	All, Per-Host	Medium
Open Firebase Database	Yes	All, Per-Host	Information
OpenRedirect	Yes	All, Open Redirect, Per-URL	Medium
OpenRedirect-ParameterPollution	Yes	All, Open Redirect, Per-URL	Medium
OpenRedirect-ParameterPollution_Path	Yes	All, Open Redirect, Per-Host	Medium
OpenRedirect_SSRF	Yes	SSRF, Open Redirect, All, Per-URL	High
OpenRedirect_SSRF_Collaborator	Yes	All, SSRF, Open Redirect, Per-URL	Medium
OpenRedirect_SSRF_Collaborator_HTTP0_9	Yes	All, Per-URL	Medium
OpenRedirect_SSRF_Collaborator_HTTP1_0	Yes	All, Per-URL	Medium
OpenRedirect_to_Account_Takeover	Yes	All, Per-URL	Low
Openredirect_to_XSS	Yes	All, XSS, Per-URL	Medium
Password-Reset-Headers	No	Forgot Password, Per-URL, Manual-Review	Information
Password-Reset-Params	No	Forgot Password, Per-URL, Manual-Review	Information
Password-Reset-URL	No	Forgot Password, Per-URL, Manual-Review	Information
PathTraversal_Linux	Yes	All, Path Traversal, Per-URL	High
PathTraversal_Windows	Yes	All, Path Traversal, Per-URL	High
PHP_RCE	Yes	All, RCE, Per-URL	High
RCE_Linux	Yes	All, RCE, Per-URL	High
RCE_Windows	Yes	All, RCE, Per-URL	High
Solarwinds_default_admin	Yes	All, Per-Host	Information
Source_code	Yes	All, Per-URL	Information
Spring_Boot_Actuators	Yes	All, Spring, Per-Host	Low
SQLi	Yes	All, SQLi, Per-URL	Low
SQLi_Collaborator	Yes	All, SQLi, Per-URL	High
SQLi_ContentLength	Yes	SQLi_ContentLength, All, BugBounty, SQLi, Per-URL	Medium
SQLi_StausCode	Yes	All, SQLi_StatusCode, SQLi, Per-URL	High
SQLi_Timebased	Yes	All, SQLi_TimeBased, SQLi, Per-URL	High
SQLi_Timebased_Encoded_KeyCharacter	Yes	All, SQLi_TimeBased, SQLi, Per-URL	High
SQLi_Timebased_Encoded_Space	Yes	All, SQLi_TimeBased, SQLi, Per-URL	High
SSRF-Collaborator	Yes	All, SSRF, Per-URL	Medium
SSRF-URLScheme	Yes	All, SSRF, Per-URL	High
SSRF_Collaborator_HTTP0_9	Yes	All, SSRF, Per-URL	Medium
SSRF_Collaborator_HTTP1_0	Yes	All, SSRF, Per-URL	Medium
SSTI	Yes	All, SSTI, Per-URL	High
SVNFinder	Yes	All, Fuzzing Files, Per-Host	Low
Swagger-Finder	Yes	All, Fuzzing Files, Per-Host	Information
Symfony_Debug	Yes	All, Per-Host	Medium
Test_XSS_discover	Yes	All, XSS, Per-URL	Low
Woody_Wordpress_RCE	Yes	All, Wordpress, Per-Host	Information
Wordpress_Config_Accessible	Yes	All, Wordpress, Per-Host	High
Wordpress_directory_listing	Yes	All, Wordpress, Per-Host	Low
Wordpress_Path_Traversal	Yes	All, Wordpress, Per-Host	High
Wordpress_user_enum_json	Yes	All, Wordpress, Per-Host	Low
Wordpress_user_enum_oembed	Yes	All, Wordpress, Per-Host	Information
Wordpress_users_enum_yoastseo	Yes	All, Wordpress, Per-Host	Information
Wordpress_XMLRPC_ListMethods	Yes	All, Wordpress, Per-Host	Information
Wordpress_XMLRPC_Pingback	Yes	All, Wordpress, Per-Host	Low
X-Headers-Collaborator	Yes	All, X-Headers-Collab, Per-URL	Medium
XSS	Yes	All, XSS, Per-URL	Information
XSS_DOM_Context	Yes	XSS, DOM_Context, All, Per-URL	Information
XSS_GETPOST	Yes	All, XSS, Per-URL	Information
XSS_HTML_Attribute_Context	Yes	XSS, HTML_Attribute, All, Per-URL	Information
XSS_HTML_Comment_Context	Yes	XSS, HTML_Comment, All, Per-URL	Information
XSS_HTML_Tag_Context	Yes	XSS, HTML_Tag, All, Per-URL	Information
XSS_HtmlUrlEncode	Yes	All, XSS, Per-URL	Information
XSS_JavaScript_Context	Yes	XSS, JavaScript_Context, All, Per-URL	Information
XSS_URL_Context	Yes	XSS, URL_Context, All, Per-URL	Low
XSS_URLEncode	Yes	All, XSS, Per-URL	Information
XXE_Linux	Yes	All, XXE, Per-URL	High
XXE_Windows	Yes	All, XXE, Per-URL	High

Passive response profiles

Passive response profiles

Name	Enabled	Tags	Severity
AccessToken	Yes	All, Secrets	Information
AI-Specific-Header-Disclosure	Yes	AI, All	Information
Amazon_AWS_Url	Yes	All, Cloud	Information
Amazon_MWS_Auth_Token	Yes	All, Secrets	Information
AmazonAWS	Yes	All, Cloud	Information
Android_WebView_JS	Yes	All, Technology	Information
ApiKeyResponse	Yes	All, Secrets	Information
Artica_Web	Yes	All, Technology	Information
Artifactory_API_Token	Yes	All, Secrets	Information
Authorization_Bearer	Yes	All, Secrets	Information
AWS_Access_Key_ID	Yes	All, Secrets	Information
AWS_Client_Secret	Yes	All, Secrets	Information
AWS_Creds_File	Yes	All, Secrets	Information
AWS_EC2_Url	Yes	All, Cloud	Information
AWS_Region	Yes	All, Cloud	Information
Azure_Blob_Discovered	Yes	All, Cloud	Information
Basic_Auth_Credentials	Yes	All, Secrets	Information
Bitcoin_Address	Yes	All, Secrets	Information
Cache-Control	Yes	All, Security_Headers	Information
CDN_Detected	Yes	All, Technology	Information
Cisco_ASA_Device_Found	Yes	All, Technology	Low
Citrix_Detection	Yes	All, Technology	Information
CMS_Found	Yes	All, Technology	Information
Content-Security-Policy	Yes	All, Security_Headers	Information
CookieFlag-HttpOnly	Yes	All, Cookie_Security	Low
CookieFlag-SameSite	Yes	All, Cookie_Security	Information
CookieFlag-Secure	Yes	All, Cookie_Security	Low
CouchDB_Response	Yes	All, Technology	Information
Debug Pages	Yes	All, Information_Disclosure	Information
Debug_variables	Yes	All, Information_Disclosure	Information
DefaultRDP	Yes	All, Information_Disclosure	Information
DigitalOcean_Space_Discovered	Yes	All, Cloud	Information
DirectoryListing	Yes	All, Information_Disclosure	Information
Docker_API_Response	Yes	All, Technology	Information
DomainTakeOver_Strings	Yes	All, Vulnerabilities	Information
Drupal_Response	Yes	All, Technology	Information
DWREndpoints	Yes	All, Technology	Information
EndpointsExtractor	Yes	All, Information_Disclosure	Information
Env_Vars	Yes	All, Information_Disclosure	Information
Facebook_Client_ID	Yes	All, Secrets	Information
Facebook_OAuth	Yes	All, Secrets	Information
Fortinet_Panel	Yes	All, Technology	Information
Gateway-Fingerprinting	Yes	AI, All	Information
GCP_Service_Account	Yes	All, Secrets	Information
GCP_Urls	Yes	All, Cloud	Information
Gmail_Oauth_2.0	Yes	All, Secrets	Information
Google_Cloud_Buckets	Yes	All, Cloud	Information
Health-Status-Metadata-Exposure	Yes	AI, All	Information
Hidden Parameters	Yes	All, Information_Disclosure	Information
Interesting_Keyworks	Yes	All, Information_Disclosure	Information
Java_De-Serialization	Yes	All, Vulnerabilities	Information
Jenkins_Response	Yes	All, Technology	Information
Joomla detection	Yes	All, Technology	Information
Joomla-CVE-2015-7297	Yes	All, Vulnerabilities	Information
JS_Variables	Yes	All, Information_Disclosure	Information
Kubernetes_Response	Yes	All, Technology	Information
LinkedIn_Secret	Yes	All, Secrets	Information
MAC_Address	Yes	All, Information_Disclosure	Information
MAGMI_Response	Yes	All, Technology	Information
Netsweeper_Response	Yes	All, Technology	Information
NoSQL_Session_Token	Yes	All, Secrets	Information
NuGet_Api_Key	Yes	All, Secrets	Information
Octopus_API_Key	Yes	All, Secrets	Information
OpenAI-Compatible-API-Fingerprinting	Yes	AI, All	Information
Outlook_Team	Yes	All, Information_Disclosure	Information
Paypal_Braintree_access_token	Yes	All, Secrets	Information
Picatic_API_Key	Yes	All, Secrets	Information
Private_SSH_Key	Yes	All, Secrets	Information
RateLimit-Headers-Disclosure	Yes	AI, All	Information
Reflected_values_greater_than_three_characters	Yes	All, Information_Disclosure	Information
ServerBannerResponse	Yes	All, Technology	Information
Software_Version	Yes	All, Technology	Information
Solarwinds_Orion_Response	Yes	All, Technology	Information
SonarQube_API_Key_Docs	Yes	All, Secrets	Information
SQL_Message_Detected	Yes	All, Vulnerabilities	Information
StackHawk_API_Key	Yes	All, Secrets	Information
Strict-Transport-Security	Yes	All, Security_Headers	Information
Subdomain_takeover	Yes	All, Vulnerabilities	Information
Swagger_found	Yes	All, Technology	Information
Symfony_Response	Yes	All, Technology	Information
Tomcat_Response_Detection	Yes	All, Technology	Information
Traefik_Response	Yes	All, Technology	Information
vBulletin_Response	Yes	All, Technology	Information
WAF_Found	Yes	All, Technology	Information
Wordpress detection	Yes	All, Technology	Information
Wordpress-SensitiveDirectories	Yes	All, Vulnerabilities	Information
WP_Config	Yes	All, Information_Disclosure	Information
X-Content-Type-Options	Yes	All, Security_Headers	Information
X-Frame-Options	Yes	All, Security_Headers	Information
XML_Response_Detected	Yes	All, Technology, XML	Information

Passive request profiles

Passive request profiles

Name	Enabled	Tags	Severity
Action_parameters	Yes	All, Parameters	Information
All_Requests_And_Parameters	Yes	All, Parameters	Information
AmazonAWSRequest	Yes	All, Technology	Information
Api_path	Yes	All, API	Information
ApiKeyRequest	Yes	All, Secrets	Information
Artica_Web_Request	Yes	All, Technology	Information
AuthorizationBearerToken	Yes	All, Secrets	Information
Cisco_Request_Detected	Yes	All, Technology	Information
CouchDB_Request	Yes	All, Technology	Information
Debug_Logic_Parameters	Yes	All, Parameters	Information
ErrorPages-JobApps	Yes	All, Parameters	Information
Firebase DB detected	Yes	All, Parameters	Information
Fortinet_Request	Yes	All, Technology	Information
GraphQL_Endpoint	Yes	All, API	Information
Health-Status-Endpoint-Discovery	Yes	AI, All	Information
IDOR_parameters	Yes	All, Vuln_Parameters	Information
Jira_Request	Yes	All, Technology	Information
Key_Parameters	Yes	All, Parameters	Information
LFI_RFI_Parameters	Yes	All, Vuln_Parameters	Information
MAGMI_Request	Yes	All, Technology	Information
Netsweeper_Request	Yes	All, Technology	Information
OAuth_parameters	Yes	All, Secrets	Information
OpenRedirect_SSRF_Parameters	Yes	All, Vuln_Parameters	Information
RCE_Parameters	Yes	All, Vuln_Parameters	Information
RegisterUser_parameters	Yes	All, Vuln_Parameters	Information
Secret-keywords-SecLists	Yes	All, Secrets	Information
Secrets_Request	Yes	All, Secrets	Information
Solarwinds_Orion_Request	Yes	All, Technology	Information
Springboot_Requests	Yes	All, API	Information
SQLi_Parameters	Yes	All, Vuln_Parameters	Information
SSTI_Parameters	Yes	All, Vuln_Parameters	Information
Swagger_Request	Yes	All, API	Information
Token_Parameters	Yes	All, Parameters	Information
URL_as_a_Value	Yes	All, Parameters	Information
URL_Path_as_a_Value	Yes	All, Parameters	Information
UserEnum_parameters	Yes	All, Vuln_Parameters	Information
UUID_Request	Yes	All, Parameters	Information
Weblogic_Request	Yes	All, Technology	Information
WeblogicServer-UDDI_Explorer	Yes	All, Technology	Information
XML_Content_Detected	Yes	All, Technology, XML	Information
XSS_Parameters	Yes	All, Vuln_Parameters	Information