Professional / Community 2024.12

Summary: PortSwigger released Burp Suite Professional/Community 2024.12 on 19 December 2024, adding a capture filter to the Burp Intruder attack results window and automatic Base64 and Q-encoded decoding of SMTP messages in Burp Collaborator. The release also improves recorded logins using aria-label properties, updates the Montoya API to allow custom SNI fields and request timeouts, and upgrades Burp's browser to Chromium 131.
Key Takeaway: The Montoya API now lets extensions set a custom Server Name Indication field and per-request timeouts, which directly supports testing HTTP Host header attacks - a capability that changes what custom tooling can reach during an engagement.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026