Professional / Community 2024.11

Summary: PortSwigger released Burp Suite Professional/Community 2024.11 on 25 November 2024, adding site map filter Bambdas, match and replace Bambdas with access to a subset of MontoyaAPI functionality, dynamic authentication tokens for API-only scans, and revised payload marker handling in Intruder. The release also adds console logging for Bambdas, an IPv4/IPv6 DNS resolution setting, HTTPOnly and Secure flag display in the cookie jar, scanner prioritization of authenticated items, and upgrades Burp's browser to Chromium 131.0.6778.86 on Windows and Mac and 131.0.6778.85 on Linux.
Key Takeaway: The release extends Bambdas with MontoyaAPI access while warning that some methods may still affect Burp's performance or cause memory leaks, and it adds automatic token renewal so API scans keep access to secured endpoints without manual intervention.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026