Enterprise Edition 2024.8
Summary: PortSwigger released Burp Suite Enterprise Edition 2024.8 on 27 August 2024, adding endpoint configuration for API scanning that lets users select or deselect endpoints, search them, and filter by HTTP method from a new Endpoints tab. The release also adds API authentication for CI-driven scans via the CI configuration YAML file, supporting API key, Basic, and Bearer Token methods, plus active and passive scan checks that search common file names and locations for publicly available OpenAPI definitions.
What you should know: Endpoint selection exists so scans can be stopped from sending potentially destructive DELETE requests, and the new checks hunt for OpenAPI definitions left publicly available during scans - both are concrete ways a scan can change or expose the very systems it is meant to test.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026