Professional / Community 1.7.13
Summary: PortSwigger released Burp Suite Professional/Community 1.7.13 on 29 November 2016, adding a large number of new API sink definitions to Burp Infiltrator for both the Java and .NET platforms. The release also signs the BurpInfiltrator.dll .NET assembly and refers to it by strong name, and enhances the manual Burp Collaborator client to show full details of Infiltrator interactions, including the Collaborator payload in the interactions table plus user comments and highlights.
What's compelling: The expanded sink definitions widen coverage of existing vulnerabilities such as OS command injection and file path traversal, and the Collaborator client can now surface the full SQL query executed for a given input - detail that materially changes how far manual testing and exploitation can go.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026