Cyber Risks · PortSwigger Research

Professional / Community 2024.7

Summary: PortSwigger released Burp Suite Professional/Community 2024.7 on 1 August 2024, adding performance upgrades for large responses and projects with many Repeater tabs, an Intercept feature that lists messages in the order they were sent, and a Scanned insertion points column in the Audit items table. The release also extends OpenAPI scanning to endpoints requiring HTTP headers, adds a Site map toggle between URL and Crawl paths views, and updates the Montoya API.

What's compelling: The fixes address a bug that caused long parsing times and high memory usage for OpenAPI definitions with deeply nested schemas, and one that left Boolean parameters at API endpoints unpopulated during scans - gaps that could distort results for teams testing APIs at scale.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related