Professional / Community 2022.3.6

Summary: PortSwigger released Burp Suite Professional/Community 2022.3.6 on 29 April 2022, adding message editor tabs that replicate Inspector panel features and introducing the *.oastify.com domain for the public Burp Collaborator server in place of *.burpcollaborator.net. The release also lets Burp Scanner's dynamic JavaScript analysis fetch data from out-of-scope API endpoints to load pages correctly, disables the tab-row shifting behavior, and upgrades Burp's browser to Chromium 101.0.4951.41.
What you should know: The domain change exists because widespread blocking of *.burpcollaborator.net was hiding out-of-band vulnerabilities, so teams running Burp in closed networks may need to allow *.oastify.com on port 443 or keep missing findings they previously could not see.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026