Cyber Risks · PortSwigger Research

Enterprise Edition 2023.9

Summary: PortSwigger released Burp Suite Enterprise Edition 2023.9 on 2 October 2023, adding three new columns to the bulk import CSV template so login details can be included when sites are imported in bulk. The release also raises the character limit for custom headers and cookies to 8192 characters, which the vendor says supports much longer JWTs, and fixes several bugs.

Why it matters: Bulk-importing sites with their login details puts credentialed scanning at scale into a single CSV, so the file holding those credentials becomes a target in its own right.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related