Professional 1.4.03
Summary: PortSwigger released Burp Suite Professional 1.4.03 on 10 November 2011, adding a CSRF generator that produces proof-of-concept HTML for nearly any HTTP request, with support for URL, multipart, and plain text encoding. The release also added comments and highlighting in the proxy intercept window, a site analyser tab listing unique parameters and their URL counts, proxy listeners bound to specific IP addresses, sslstrip-style HTTPS-to-HTTP conversion and cookie secure-flag removal, and copy buttons for session handling rules and macros.
What's compelling: The sslstrip-style features let a tester force HTTPS on outgoing requests, rewrite HTTPS links to HTTP, and strip the secure flag from cookies so browsers submit them over HTTP - the same mechanics an active man-in-the-middle attacker uses against users who start on HTTP.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026