Cyber Risks · PortSwigger Research

Professional / Community 2.1.02

Summary: PortSwigger released an update to Burp Suite on 26 July 2019 that adds a WebSocket connection wizard to Burp Repeater, giving users full manual control over the WebSocket negotiation request. The release also includes minor enhancements: Burp now suggests a project filename based on the project name and a timestamp when creating a new project on disk, warns when a loaded configuration file contains no options of the relevant type, and fixes various minor bugs.

What you should know: The change hands testers full manual control over the WebSocket negotiation request, so the handshake itself becomes something they can inspect and manipulate rather than a step the tool handles for them.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related