Cyber Risks · PortSwigger Research

Professional 1.5.21

Summary: PortSwigger released Burp Suite Professional 1.5.21 on 30 January 2014, adding WebSockets support to the Proxy tool so messages can be viewed, intercepted and modified like regular HTTP traffic. The release also added a WebSockets history tab with filter, sort and search, an option to intercept WebSockets messages under Proxy options, inline report images in generated HTML, and an anonymous performance feedback function that can be disabled.

What you should know: WebSockets traffic moving through the same intercept and history controls as HTTP changes what a tester can see and alter in a session, and the new performance feedback function sends technical data about Burp's behavior unless a user turns it off under Options.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related