Cyber Risks · PortSwigger Research

Professional / Community 2024.1.1.4

Summary: PortSwigger released Burp Suite Professional and Community 2024.1.1.4 on 1 March 2024, adding an Insertion points panel to Burp Scanner's Audit items tab that lists insertion points in a tree view categorized as Detected, Moved, and Added, with status shown as Pending, Audited, or Skipped. The release also adds native ARM64 builds for Windows, column reordering and hiding in Intruder and Proxy data tables, a Start response timer column in HTTP history, GraphQL query syntax highlighting, and a reduced number of browsers created during the scanner's audit phase.

What's compelling: The new Insertion points panel makes visible exactly how much attack surface the scanner covered on each request, so a clean scan result can be read against what was actually tested rather than assumed.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related