Professional 1.3.06
Summary: PortSwigger released Burp Suite Professional 1.3.06 on 22 June 2010, adding Scanner engine enhancements aimed at improving vulnerability detection and reducing false positives, with most changes affecting core detection logic for XSS and SQL injection. The release also adds a Scanner option to follow redirects, which Burp restricts to in-scope targets or, for out-of-scope requests, to the same host and port while excluding scope-exclusion rules.
Key Takeaway: The redirect-following feature exists because some vulnerabilities only surface after a redirect, but Burp deliberately limits which redirects it follows to avoid inadvertently attacking third-party applications that receive submitted parameter values.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026