burpsuite-pro

maintainer freb · 13 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The download is from the official vendor's domain (portswigger.net), which is the legitimate source for Burp Suite Pro; despite the non-standard URL pattern, this is a normal and expected way to obtain the official prebuilt JAR file, and the checksums are provided and valid.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The download is from the official vendor's domain (portswigger.net), which is the legitimate source for Burp Suite Pro; despite the non-standard URL pattern, this is a normal and expected way to obtain the official prebuilt JAR file, and the checksums are provided and valid.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("${pkgname}-${pkgver}-orig.jar::https://portswigger.net/burp/releases/download?product=desktop&version=${pkgver}&type=Jar"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rasmus Moorats <xx+aur@nns.ee>
    
      2# Maintainer: freb
    
      3
    
      4pkgname=burpsuite-pro
    
      5pkgver=2026.7.1
    
      6pkgrel=1
    
      7pkgdesc='An integrated platform for performing security testing of web applications (professional edition)'
    
      8url='https://portswigger.net/burp/'
    
      9depends=('java-runtime>=25' 'hicolor-icon-theme')
    
      10makedepends=('zip')
    
      11arch=('any')
    
      12license=('custom')
    
      13noextract=("${pkgname}-${pkgver}-orig.jar")
    
      14source=("${pkgname}-${pkgver}-orig.jar::https://portswigger.net/burp/releases/download?product=desktop&version=${pkgver}&type=Jar"
    
      15  "${pkgname}"
    
      16  "${pkgname}.desktop"
    
      17  'icon16.png'
    
      18  'icon24.png'
    
      19  'icon32.png'
    
      20  'icon48.png'
    
      21  'icon128.png'
    
      22  'icon256.png'
    
      23  'icon512.png'
    
      24  'icon.svg')
    
      25sha256sums=('21aaf2b965e0932ca2a4d94c189c472a519c7f5bc71e01fb9b700db359bafb27'
    
      26            '939b66c99461307d361c91b811785b92a3cd376a4ac8e72dbf76af1b75503d78'
    
      27            'f442258c5616969bfaad7c20b2ff99f05696ad04c2e2c3d145a360615650b9ec'
    
      28            'ff0b230af06fb76af053090ac021bf45b88341d746e67f6bb9e94ba40957d9d8'
    
      29            'a6791fcaee558f6744b4f5a3fc0af2c9ad7ce244033e224c4e4464563ac9b911'
    
      30            '48d529f2a045b1179d9cd87ffdeb7fd469d963f7606fd22b7edc665d0515e1d2'
    
      31            '2b2407b8ab2ee181bfd64e3ba3e3090a328cbef8f53cce20ba76cffbfb3bc1d1'
    
      32            '28d17763c17e010936ad8ed44427d9ce6523510f580aefce52eb7c0f26b48045'
    
      33            'da6469f32b0acfcad2057cf0920c128bbbf64bc72ec6a4d5e5ba10d5b8a2d859'
    
      34            '6bbfd022aa451efeb439a89527b814ae06f7ce6196f7ad8db276e9ad372a7e32'
    
      35            '8777077ed5b1809c8adde4c056a315f8ec8f1b79f4c4c0e60eb3582c4d7ab71d')
    
      36
    
      37prepare() {
    
      38  cp "${srcdir}/${pkgname}-${pkgver}-orig.jar" "${srcdir}/${pkgname}-${pkgver}.jar"
    
      39  # remove useless chromium versions
    
      40  zip -d "${srcdir}/${pkgname}-${pkgver}.jar" 'chromium-macosx*.zip' 'chromium-win*.zip'
    
      41}
    
      42
    
      43package() {
    
      44  install -Dm644 "${srcdir}/${pkgname}-${pkgver}.jar" "${pkgdir}/usr/share/${pkgname}/${pkgname}.jar"
    
      45  install -Dm644 "${srcdir}/${pkgname}.desktop" -t "${pkgdir}/usr/share/applications/"
    
      46  install -Dm755 "${srcdir}/${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
    
      47
    
      48  # install icons
    
      49  for size in 16 24 32 48 128 256 512; do
    
      50    install -Dm644 "${srcdir}/icon${size}.png" "${pkgdir}/usr/share/icons/hicolor/${size}x${size}/apps/burpsuite-pro.png"
    
      51  done
    
      52  install -Dm644 "${srcdir}/icon.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/burpsuite-pro.svg"
    
      53}
    
      54

Changes since previous scan

--- PKGBUILD @ 2026-07-23 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -2,7 +2,7 @@
 # Maintainer: freb
 
 pkgname=burpsuite-pro
-pkgver=2026.7
+pkgver=2026.7.1
 pkgrel=1
 pkgdesc='An integrated platform for performing security testing of web applications (professional edition)'
 url='https://portswigger.net/burp/'
@@ -22,7 +22,7 @@
   'icon256.png'
   'icon512.png'
   'icon.svg')
-sha256sums=('bd97023455441e0d739210234aa73abd5cc5694d18759dbb005f9e1cb7cb6b3b'
+sha256sums=('21aaf2b965e0932ca2a4d94c189c472a519c7f5bc71e01fb9b700db359bafb27'
             '939b66c99461307d361c91b811785b92a3cd376a4ac8e72dbf76af1b75503d78'
             'f442258c5616969bfaad7c20b2ff99f05696ad04c2e2c3d145a360615650b9ec'
             'ff0b230af06fb76af053090ac021bf45b88341d746e67f6bb9e94ba40957d9d8'

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 11:23:42	MEDIUM	1
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 09:14:00	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:04:49	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1