Professional / Community 2025.1.1
Summary: PortSwigger released Burp Suite Professional/Community 2025.1.1 on 13 February 2025, adding an Auto-pause attack setting to Burp Intruder that pauses an attack when a specified expression appears in or is missing from a response. The release also adds CSV export for Burp Collaborator interactions, automatic highlighting of Content-Length response header mismatches to help identify issues such as HTTP request smuggling, and upgrades Burp's browser to Chromium 133.0.6943.54 on Windows and Mac and 133.0.6943.53 on Linux.
Key Takeaway: The Content-Length mismatch highlighting targets HTTP request smuggling, a vulnerability class that depends on exactly the kind of header discrepancy the scanner now flags automatically, and the Intruder auto-pause reduces memory use during large attacks so testers can focus on the responses that matter.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026