Professional 1.5.15
Summary: PortSwigger released Burp Suite Professional 1.5.15 on 3 September 2013, a large update to the Proxy tool that adds SSL pass-through for specified destination servers, including automatic addition of hosts when client SSL negotiation fails. The release also adds configurable proxy interception at startup, cookie-based interception rules, expanded match/replace rules with literal or regex support, manual editing of the target server in the intercept view, and support for the Firefox plug-n-hack plugin.
What's compelling: The SSL pass-through option targets clients that perform certificate pinning, such as mobile applications, where intercepting traffic through Burp's CA certificate is otherwise not straightforward - a practical constraint for any team testing pinned mobile apps.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026