Cyber Risks · PortSwigger Research

Professional / Community 2022.6.1

Summary: PortSwigger released Burp Suite Professional/Community 2022.6.1 on 23 June 2022, adding HTTP/1 keep-alive so Burp can reuse a single TCP connection for multiple requests, preset scan modes in the Scan Configuration menu, and tab grouping and search for Repeater plus a scrollable tab view for Intruder and Repeater. The release also adds DOM Invader support for testing client-side prototype pollution, along with stability, performance, and progress-estimation improvements to Burp Scanner.

Why it matters: The keep-alive change matters because Burp previously closed the connection after every request/response pair even when the server supported reuse, and the release states that reusing connections brings significant benefits in request speed and timing accuracy - the kind of precision that affects how testers read timing-based behavior.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related