Professional 1.3beta2
Summary: PortSwigger released Burp Suite Professional 1.3beta2 on 5 January 2010, adding conversion functions to the request/response editor that are reachable from the context menu and shortcut keys. The conversions include URL-encoding, HTML-encoding and Base64-encoding, plus a "constructed string" option that turns a selected expression such as xss into String.fromCharCode(120,115,115) for code-injection contexts, and the release also improves Mac compatibility so shortcuts work with both Ctrl and Command keys.
Bottom line: The constructed-string conversion automates the encoding step testers use to slip payloads past input filters, so the same request-editor convenience that speeds up a penetration test also lowers the effort needed to craft injection attempts against a web application.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026