Cyber Risks · PortSwigger Research

Professional 1.4.06

Summary: PortSwigger released Burp Suite Professional 1.4.06 on 1 March 2012 with a set of bugfixes and minor enhancements. The fixes covered the Spider's handling of maximum requests per URL and BASE tags, display errors in the HTTP message viewer/editor, restarting waiting active scan queue items after state restoration, NTLM authentication when following redirects, and Sequencer's character-level token analysis on small samples with large character sets.

What you should know: The release added cookie expiration tracking to the session handling cookie jar, removing expired cookies from requests, because the previous failure to do so prevented Burp from working properly with some authentication mechanisms. It also added two Burp Proxy options to deter browsers from HTTP request pipelining, which was tied to an NTLM authentication issue reported by some users.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related