Professional 1.7.04

Summary: PortSwigger released Burp Suite 1.7.04 on 26 July 2016, introducing Burp Infiltrator, a tool that instruments target web applications so Burp Scanner can detect when its input reaches potentially unsafe server-side APIs. The initial release supports Java and other JVM-based languages such as Groovy, on Java 4 and upwards, with .NET support planned; it uses Burp Collaborator for communications back to the scanning Burp Suite instance, and users running a private Collaborator server should upgrade.
What's compelling: The tool works by modifying the target application itself, so testing now reaches server-side code paths that black-box scanning cannot see - and anyone running a private Burp Collaborator server has to upgrade to keep that channel working.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026