Cyber Risks · PortSwigger Research

Burp Suite roadmap update: July 2023

Summary: PortSwigger's July 2023 roadmap for Burp Suite lists planned and in-progress work including a BCheck testing tool, code-your-own view filters, scanner auto configuration, service worker and WebSocket crawling, API scanning improvements, and fewer browser instances with multiple isolated tabs. Already released items include BChecks in the 2023.6.2 release, Burp Organizer in 2023.5.2, Collaborator payloads in Intruder from 2023.3.2, GraphQL scan checks, React form handling in 2023.4, and ARM64 Linux support in 2023.4.3.

Bottom line: The roadmap concedes that Burp Scanner's crawler does not properly support service workers and WebSocket messages during scans, which can cause applications to function incorrectly and lead to incomplete scan coverage - a gap that persists until the fix ships.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related