Cyber Risks · PortSwigger Research

Professional 1.6.16

Summary: PortSwigger released Burp Suite Professional 1.6.16 on 17 April 2015 to fix issues in the previous day's beta of the new Burp Collaborator feature. Among the fixes is a bug that could cause Burp to send some Collaborator-related test payloads even when the user had disabled the Collaborator feature.

Key Takeaway: A scanner sending test payloads after an operator has switched the feature off is exactly the kind of outbound traffic that shows up in a client's logs and has to be explained; the release remains officially beta while PortSwigger monitors Collaborator for further issues.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related