Professional 1.6beta

Summary: PortSwigger released Burp Suite Professional 1.6beta on 4 March 2014, introducing the BApp Store, a repository of user-written Burp extensions that can be installed with one click from within Burp or downloaded for manual installation on machines without Internet access. The release also rationalized URL-encoding of parameters in session handling macros so Burp applies encoding automatically based on the response and request contexts, and fixed a Proxy SSL negotiation bug introduced in v1.5.21 that affected clients specifying only an IP address, restoring the behavior needed to support Android clients.
What's compelling: The BApp Store turned Burp from a fixed scanner into a platform that users extend themselves, so the tooling your testers rely on can now include third-party code installed with a single click.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026