Professional 1.3.01
Summary: PortSwigger released a beta update to Burp Intruder on 25 March 2010 that adds tabbed attack configuration, letting users run multiple attacks simultaneously and copy or save attack configurations between tabs. The release also adds a payload positions editor with binary and non-printing content support, three new payload sources (character frobber, bit flipper, username generator), a rules-based payload processor, and live attack configuration that can be modified in real time within the results window.
What's compelling: The bit flipper payload source is aimed at testing whether applications are vulnerable when session tokens or parameter values contain data encrypted with a block cipher in CBC mode, by modifying bits in the preceding cipher block to change decrypted data systematically.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026