Cyber Risks · PortSwigger Research

Professional / Community 1.7.18

Summary: PortSwigger released Burp Suite Professional/Community 1.7.18 on 28 February 2017, adding an option to stop out-of-scope items passing through Burp Proxy from being accumulated as project data. The setting, at Proxy / Options / Miscellaneous, prevents out-of-scope requests and responses from being added to Proxy history or the Target site map or sent automatically to other Burp tools such as live scanning, and Burp prompts to enable it when an item is first added to scope.

Key Takeaway: Users who route all system traffic through Burp - OS components, other software, unrelated browsing - were filling Proxy history and the site map with irrelevant data and feeding it to live scanning; this release gives them a switch to keep that noise out of the project.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related