Professional 1.6.10
Summary: PortSwigger released Burp Suite Professional 1.6.10 on 5 February 2015, adding new Scanner checks and improving existing ones for cross-site scripting and server-side code injection. The release also improved site map performance, added a UI option at Options / SSL / SSL Negotiation to disable the SNI extension as a workaround for a Java SSL connection failure, and added two Burp Extender APIs, getExtensionFilename() and isExtensionBapp().
Key Takeaway: The SNI workaround matters because Java 7 enables the extension by default and fails to connect to misconfigured servers that send an "Unrecognized name" warning, which browsers ignore - so testers were disabling SNI by command line until this UI option existed.
Read the original at PortSwigger Research ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026