burpsuite-pro

LOW

maintainer freb 13 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads the official Burp Suite Pro JAR from the vendor's domain (portswigger.net), which is the legitimate source; despite the non-standard URL pattern, this is a normal and expected way to obtain the software, and the checksums are provided and valid.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the official Burp Suite Pro JAR from the vendor's domain (portswigger.net), which is the legitimate source; despite the non-standard URL pattern, this is a normal and expected way to obtain the software, and the checksums are provided and valid.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("${pkgname}-${pkgver}-orig.jar::https://portswigger.net/burp/releases/download?product=desktop&version=${pkgver}&type=Jar"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rasmus Moorats <xx+aur@nns.ee>
    
      2# Maintainer: freb
    
      3
    
      4pkgname=burpsuite-pro
    
      5pkgver=2026.7.3
    
      6pkgrel=1
    
      7pkgdesc='An integrated platform for performing security testing of web applications (professional edition)'
    
      8url='https://portswigger.net/burp/'
    
      9depends=('java-runtime>=25' 'hicolor-icon-theme')
    
      10makedepends=('zip')
    
      11arch=('any')
    
      12license=('custom')
    
      13noextract=("${pkgname}-${pkgver}-orig.jar")
    
      14source=("${pkgname}-${pkgver}-orig.jar::https://portswigger.net/burp/releases/download?product=desktop&version=${pkgver}&type=Jar"
    
      15  "${pkgname}"
    
      16  "${pkgname}.desktop"
    
      17  'icon16.png'
    
      18  'icon24.png'
    
      19  'icon32.png'
    
      20  'icon48.png'
    
      21  'icon128.png'
    
      22  'icon256.png'
    
      23  'icon512.png'
    
      24  'icon.svg')
    
      25sha256sums=('c8262dc5426f38bedc490d66c5d21b6ff77d6dc6d85cefe6a66c882690134069'
    
      26            '939b66c99461307d361c91b811785b92a3cd376a4ac8e72dbf76af1b75503d78'
    
      27            'f442258c5616969bfaad7c20b2ff99f05696ad04c2e2c3d145a360615650b9ec'
    
      28            'ff0b230af06fb76af053090ac021bf45b88341d746e67f6bb9e94ba40957d9d8'
    
      29            'a6791fcaee558f6744b4f5a3fc0af2c9ad7ce244033e224c4e4464563ac9b911'
    
      30            '48d529f2a045b1179d9cd87ffdeb7fd469d963f7606fd22b7edc665d0515e1d2'
    
      31            '2b2407b8ab2ee181bfd64e3ba3e3090a328cbef8f53cce20ba76cffbfb3bc1d1'
    
      32            '28d17763c17e010936ad8ed44427d9ce6523510f580aefce52eb7c0f26b48045'
    
      33            'da6469f32b0acfcad2057cf0920c128bbbf64bc72ec6a4d5e5ba10d5b8a2d859'
    
      34            '6bbfd022aa451efeb439a89527b814ae06f7ce6196f7ad8db276e9ad372a7e32'
    
      35            '8777077ed5b1809c8adde4c056a315f8ec8f1b79f4c4c0e60eb3582c4d7ab71d')
    
      36
    
      37prepare() {
    
      38  cp "${srcdir}/${pkgname}-${pkgver}-orig.jar" "${srcdir}/${pkgname}-${pkgver}.jar"
    
      39  # remove useless chromium versions
    
      40  zip -d "${srcdir}/${pkgname}-${pkgver}.jar" 'chromium-macosx*.zip' 'chromium-win*.zip'
    
      41}
    
      42
    
      43package() {
    
      44  install -Dm644 "${srcdir}/${pkgname}-${pkgver}.jar" "${pkgdir}/usr/share/${pkgname}/${pkgname}.jar"
    
      45  install -Dm644 "${srcdir}/${pkgname}.desktop" -t "${pkgdir}/usr/share/applications/"
    
      46  install -Dm755 "${srcdir}/${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
    
      47
    
      48  # install icons
    
      49  for size in 16 24 32 48 128 256 512; do
    
      50    install -Dm644 "${srcdir}/icon${size}.png" "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/burpsuite-pro.png"
    
      51  done
    
      52  install -Dm644 "${srcdir}/icon.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/burpsuite-pro.svg"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2