Professional / Community 2025.11
Summary: PortSwigger released Burp Suite Professional/Community 2025.11 on 13 November 2025, adding a Command palette invoked with Ctrl+K or Cmd+K for keyboard access to commands, project file search, BApp store extensions, and extension invocation. The release also clarifies the Maximum memory usage setting, adds Burp Collaborator support in active custom scan checks for out-of-band vulnerability detection, and updates Burp Intruder's predefined payload lists from the PortSwigger XSS cheat sheet.
Key Takeaway: Extension developers can now register named hotkeys to add their own commands to the palette, and Collaborator keeps polling for delayed interactions after a scan completes as long as the check stays active - so scan coverage and tooling reach extend beyond the scan window itself.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026