Professional / Community 2023.8
Summary: PortSwigger released Burp Suite Professional/Community 2023.8 on 27 July 2023, adding HTTP/1 connection reuse in Intruder, intermediate CA certificate support for PKCS#11 hardware tokens and smart cards, a trust/untrust prompt for opening third-party project files, and custom SNI values in Repeater. Burp Scanner gained a project-level Crawl paths tab, GraphQL introspection and endpoint guessing, an Automatic throttling setting for configurable response codes, and a Run isolated scan option.
What you should know: The trust prompt exists because project files from unknown sources can carry potentially harmful settings, so a tester opening a shared project file is a real path into the tooling itself. And with Scanner now guessing common GraphQL endpoints and introspecting them, scans will reach API surface that a crawl alone would never have found.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026