Cyber Risks · PortSwigger Research

Professional 1.5.05

Summary: PortSwigger released Burp Suite Professional 1.5.05 on Friday, 15 February 2013, adding SOCKS proxy support for remote DNS lookups that lets Burp reach TOR hidden services without any local DNS resolution. The release also lets users export and import the per-installation CA certificate and key used by Proxy listeners, adds a http://burp/cert download for the CA certificate, and introduces two new IBurpExtenderCallbacks methods, unloadExtension and getCommandLineArguments.

What's compelling: The release notes warn that anyone holding your exported CA certificate and private key can intercept your browser's HTTPS traffic even when you are not running Burp, so the new export feature turns a convenience into a key-management obligation.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related