Professional / Community 2025.7
Summary: PortSwigger released Burp Suite Professional/Community 2025.7 on 17 July 2025, adding wider color choices and automatic next-available coloring for Repeater tab groups, plus form detection that adds HTML forms to the site map and generates a representative request for each. The release also exposes Organizer contents through the OrganizerItem interface in the Montoya API, adds HTTP/2 streaming response support, updates Burp's Java version to Java 24, and upgrades the bundled browser to Chromium 138.0.7204.100/.101.
What's compelling: The live passive crawl now maps HTML forms and generates the request each form would submit, which expands the attack surface a tester can see without sending traffic manually. The new OrganizerItem interface in the Montoya API also lets teams automate extraction of Organizer data, shifting more of the workflow into scripts.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026