Professional / Community 2025.7.2
Summary: PortSwigger released Burp Suite Professional/Community 2025.7.2 on 7 August 2025, adding wider color choices and automatic next-color assignment for Repeater tab groups, form detection in the live passive crawl that adds forms to the site map with a representative request, and OrganizerItem access in the Montoya API. The release also replaces "Bambda" with "script" in some locations, adds Chrome's typical headers to from-scratch requests, supports streaming responses over HTTP/2, fixes project file corruption when streaming responses go to Organizer, and updates to Java 24 and Chromium 138.
What you should know: The crawl now maps forms and generates the request each one would submit, which widens the attack surface Burp surfaces by default - and the fix for project files corrupted by certain streaming responses to Organizer is a reminder that tooling changes can put engagement data at risk.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026