Cyber Risks · PortSwigger Research

Professional / Community 1.7.15

Summary: PortSwigger released Burp Suite Professional/Community 1.7.15 on 21 December 2016, adding custom wordlists to the Content Discovery feature, which the release calls the most frequently requested feature of all time. The release also reworks the Content Discovery engine's detection of valid versus not-found responses, which PortSwigger says is now approaching 100% accuracy in both false positives and false negatives.

What's compelling: Content Discovery accuracy determines whether your team trusts the scanner's output; PortSwigger is claiming near-perfect valid-versus-not-found detection and asking users to report any site where it falls short, so the tool's results are only as good as the sites you test them against.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related