Professional 1.6.01
Summary: PortSwigger released Burp Suite Professional 1.6.01 on 11 June 2014, an update that raised the Spider's link-discovery engine to a WIVET score of 50% and added hotkeyable actions for moving back and forward through Repeater history. The release also changed the Proxy's CA-signed host certificate "valid from" time to 30 days in the past, added an option to block access to the in-browser Proxy interface via a fully-qualified DNS name to hinder DNS rebinding attacks, and fixed bugs including CA-signed certificates generated for the redirected hostname rather than the original one.
What's compelling: The DNS rebinding option and the certificate fix address cases where a tester's own tooling can be turned against them or silently break trust - the kind of defect that surfaces as a confusing certificate error mid-engagement rather than a clean failure.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026