Professional 1.5.09
Summary: PortSwigger released Burp Suite Professional 1.5.09 on 26 March 2013, adding support for PKCS#11 client SSL certificates held on smart cards and other physical tokens, configurable at Options / SSL / Client SSL Certificates. The release also adds an option to encrypt passwords stored in Burp's saved preferences and state files, using AES with a 128-bit key derived from a master password via PKCS#5v2.0, with the master password itself never saved.
Why it matters: Before this release, passwords in Burp's persisted preferences and state files sat in plaintext, so anyone who obtained a saved configuration or state file held the credentials inside it. The fix depends on a master password that is not stored anywhere, which means losing it means losing access to the encrypted passwords.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026