Professional / Community 2024.10

Summary: PortSwigger released Burp Suite Professional/Community 2024.10 on 29 October 2024, adding a combined scan launcher for web app and API-only scans, SOAP API authentication, customizable uninteresting headers, and limited support for scanning OpenAPI 3.1.x definitions. The release also adds Collaborator filtering by network protocol, a Drop all button in Proxy Intercept, a default Proxy history message type setting, disables the Google Lens overlay in Burp's browser, reuses Chromium's default User-Agent header, upgrades the browser to Chromium 130, and fixes bugs including extension changes to intercepted requests not being applied.
Why it matters: The release disables the Google Lens overlay specifically to reduce the chance of accidental data transmission to Google, and adopts Chromium's default User-Agent to avoid requests being blocked by services like Cloudflare - two changes that alter what leaves the testing environment and how targets see its traffic.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026