Professional / Community 2024.11.2
Summary: PortSwigger released Burp Suite Professional / Community 2024.11.2 on 19 December 2024, adding site map filter Bambdas, match and replace Bambdas with access to a subset of MontoyaAPI functionality, dynamic authentication tokens for API-only scans, and enhanced payload marker handling for Intruder attacks. The release also adds console logging for Bambdas, an IPv4/IPv6 DNS resolution setting, HTTPOnly and Secure flag display in the cookie jar, scanner prioritization of authenticated items, and upgrades Burp's browser to Chromium 131.0.6778.109 on Windows and Mac and 131.0.6778.108 on Linux.
Bottom line: The release extends Bambdas with MontoyaAPI access while warning that certain methods may still impact Burp's performance or cause memory leaks, so teams writing custom Bambdas take on that risk themselves. Dynamic token renewal for API-only scans also removes a manual step that previously interrupted testing of secured endpoints.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026