Cyber Risks · PortSwigger Research

Enterprise Edition 2020.11

Summary: Burp Suite Enterprise Edition 2020.11, released 16 November 2020, adds an application logins option that lets scans handle single sign-on and other complex login mechanisms by uploading recorded login sequences captured with a dedicated Chrome extension. The release also adds scanning of JSON and YAML-based APIs, though it supports only a fairly limited range of REST APIs, and makes major changes to the GraphQL API that may require refactoring existing integrations.

Key Takeaway: The GraphQL API changes split application login entities in two, so existing integrations may break until refactored before they work with this version. The release also drops AWS CloudFormation and Azure Resource Manager templates, with PortSwigger recommending customers wait for a simpler deployment method instead.

Read the original at PortSwigger Research ↗

Topics
Identity & Access Management
Related