Cyber Risks · PortSwigger Research

Professional 1.5.12

Summary: PortSwigger released Burp Suite Professional 1.5.12 on Wednesday, 12 June 2013, a maintenance release with various enhancements and bugfixes. The release adds an Intruder payload type that copies the value of the current payload at another payload position, with processing rules to derive one payload from another, and lets Proxy interception rules be defined by listener port number.

Key Takeaway: The update also changes Scanner behavior so it no longer prompts the user for confirmation when an extension programmatically initiates a scan of an out-of-scope item, and fixes the CSRF PoC generator to properly escape tag brackets under the XHR method.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related