Professional / Community 2025.1
Summary: PortSwigger released Burp Suite Professional/Community 2025.1 on 24 January 2025, adding an Auto-pause attack setting to Burp Intruder that pauses an attack when a specified expression appears in or is missing from a response, CSV export for Burp Collaborator interactions, and automatic highlighting of Content-Length response header mismatches. The release also upgraded Burp's browser to Chromium 132.0.6834.84 on Windows and Mac and 132.0.6834.83 on Linux, and fixed several bugs including a Logger view filter that wasn't reapplied after the capture limit and extension-provided tabs disappearing when loading multiple extensions.
What's compelling: The Content-Length mismatch highlighting is aimed at helping testers spot issues such as HTTP request smuggling faster, and the Intruder auto-pause cuts memory use during large attacks - both change how quickly a testing team can surface and triage findings.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026