Cyber Risks · PortSwigger Research

Professional 1.7.09

Summary: PortSwigger released Burp Suite Professional 1.7.09 on 21 October 2016, adding a Burp Collaborator client for manual testing, new APIs for using Collaborator capabilities within Burp extensions, and a demonstration extension. The new IBurpExtenderCallbacks method creates an IBurpCollaboratorClientContext object that generates Collaborator payloads and polls the Collaborator server for resulting network interactions, and the released extension detects the HTTPoxy vulnerability via Burp Collaborator.

What you should know: The release moves out-of-band interaction testing from automated scanning into manual testing and third-party extensions, so the Collaborator server becomes a shared dependency for anyone building or running those tools.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related