Cyber Risks · PortSwigger Research

Professional 1.6.07

Summary: PortSwigger released Burp Suite Professional 1.6.07 on 3 November 2014, with enhancements to the Scanner engine logic intended to improve the reliability of issue reporting and the quality of proof-of-concept exploits. The release also raised the maximum number of active scan threads to 999, added a workaround for a Java platform change affecting SSL negotiation with some servers, and added a "Start attack" button to each configuration panel in the Intruder tool.

What's compelling: The release fixes a case where extension-initiated restoration of state could reload the Extender tool's configuration and interfere with the extension's own execution - a reminder that the tooling security teams extend is itself subject to state-handling bugs.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related