Cyber Risks · PortSwigger Research

Professional 1.6.02

Summary: PortSwigger released Burp Suite Professional 1.6.02 on Tuesday, 22 July 2014, a maintenance release containing bugfixes and minor enhancements. The fixes address HTML content wrongly inferred as JavaScript affecting the Scanner's XSS checking logic, command line arguments not passing through to extensions since v1.6.01, session handling macros incorrectly restored from state files, corruption in live streaming response rendering, and incorrect "time of day" values in Intruder results when request throttling was enabled.

Key Takeaway: The release also enabled logging options for the Sequencer tool and made BApp details tab links clickable, while PortSwigger notes it is still seeking feedback on whether an occasional UI freeze when changing Scanner issue confidence or severity has actually been fixed.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related