Cyber Risks · PortSwigger Research

Professional / Community 2024.5

Summary: PortSwigger released Burp Suite Professional/Community 2024.5 on 23 May 2024, adding Burp Scanner support for WebSockets, WebSocket match and replace rules, and a formatted "See as events" view for editing recorded logins without hand-editing JSON. The release notes state that Burp Scanner crawls sites that rely on WebSockets, including those with WebSocket-based recorded logins, but does not scan the WebSocket traffic itself.

Key Takeaway: The scanner now reaches WebSocket-dependent sites it previously could not crawl, yet it still does not scan the WebSocket traffic itself - so the traffic most applications now push through persistent connections remains outside automated coverage.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related