Professional 1.5.08

Summary: PortSwigger released Burp Suite Professional 1.5.08 on Tuesday, 12 March 2013, a maintenance release of minor enhancements and bugfixes. Changes include a new Proxy option to unpack compressed request bodies (off by default because it may break applications that require compressed requests), support for .NET DeflateStream decompression, a default match-and-replace rule to remove the Accept-Encoding header, a more responsive active scan queue, and fixes for NTLM negotiation, the Proxy history filter panel, per-host SSL certificate generation from an imported custom CA, and parsing of some ASP.NET ViewState structures.
What you should know: The release notes describe a toolkit whose defaults can break applications: the request-body decompression option ships off precisely because enabling it may break apps that require compressed requests, and a default rule now strips Accept-Encoding to deter servers from compressing responses. For teams running Burp in a testing pipeline, those defaults and the NTLM and custom-CA certificate fixes determine whether scans reflect production behavior or quietly diverge from it.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026