Professional / Community 1.7.27
Summary: PortSwigger released Burp Suite Professional and Community 1.7.27 on 31 August 2017, adding a new hotkey for Intruder payload position markers and a startup option to disable extensions. The release also changed the Burp Collaborator server to respond to DNS lookups containing the subdomain "spoofed" with the IP address 127.0.0.1, and reduced the default max heap size requested by the platform installer from 75% to 50% of total physical memory.
Why it matters: The Collaborator change exists because a scanned server vulnerable to client IP spoofing had wrongly incriminated the Collaborator, so a tester's own tooling can become the finding if that behavior is not accounted for.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026