Professional / Community 2022.12
Summary: PortSwigger released Burp Suite Professional/Community 2022.12 on 25 November 2022, adding support for replaying recorded login sequences that open new windows or tabs, such as Microsoft and Amazon SSO logins, and a new Live crawl view tab in the Scan details dialog. The release also changes how Burp Scanner's built-in browser navigates, which the company says improves scanning of sites relying on client-side JavaScript navigation and lowers memory usage during scans, and adds DOM clobbering detection to DOM Invader.
Bottom line: The scanner can now replay logins through popup-based SSO flows from Microsoft and Amazon, so authenticated scans reach sites that previously blocked automated testing - and the same capability defines what your own login defenses should assume a scanner can get past.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026