Burp Suite Free Edition v1.5 released

Summary: PortSwigger released Burp Suite Free Edition v1.5, an upgrade from v1.4 that overhauls the UI and adds sslstrip-style functionality for using non-SSL-capable tools against HTTPS applications or performing active MITM attacks against users browsing over HTTP. The release also adds an ECB Block Shuffler payload type for testing ECB-encrypted tokens, full JSON support with automatic payload placement, streaming HTTP response handling, an option to drop all out-of-scope requests, and handling for Android SSL connections.
Why it matters: A free tool now ships sslstrip-style MITM capability and an ECB Block Shuffler aimed at encrypted tokens, putting practical attack techniques for HTTPS downgrade and block-shuffling in anyone's hands at no cost.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026