Professional / Community 2022.3
Summary: PortSwigger released Burp Suite Professional / Community 2022.3 on 21 March 2022, adding message editor tabs that replicate the Inspector panel's features and a new public Burp Collaborator domain, *.oastify.com, alongside the existing *.burpcollaborator.net. The release also lets Burp Scanner's dynamic JavaScript analysis fetch data from out-of-scope API endpoints to detect DOM-based vulnerabilities, upgrades Burp's browser to Chromium 99.0.4844.74, and stops tab rows from shifting position when selected.
Why it matters: The domain change exists because widespread blocking of *.burpcollaborator.net was hiding out-of-band vulnerabilities, and teams running Burp in closed networks may now need to allow connections to *.oastify.com on port 443 or lose that detection.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026