Cyber Risks · PortSwigger Research

Professional 1.4.11

Summary: PortSwigger released Burp Suite Professional 1.4.11 on 19 July 2012, a maintenance release fixing bugs and stability issues mainly from the recent new user interface. Fixes covered UI deadlocks in the site map tree and active scan queue, Intruder payload and export errors, Content Discovery word lists, the ViewState renderer, tab renaming, the Extender API's processHttpMessage() tool name, and stalled scan threads on state restore, alongside a reworked Sequencer algorithm for non-2^N character sets and a new option to avoid saving configured passwords in persisted settings or state files.

What you should know: The release changes how Burp Sequencer handles samples whose character set size is not a round 2^N, where partial bits of entropy were previously rounded down and original data lost - a correction that affects the accuracy of the randomness measurements security teams rely on.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related