Cyber Risks · PortSwigger Research

[V13P] Other bits and pieces

Summary: PortSwigger's Dafydd Stuttard described smaller additions arriving in Burp Suite v1.3, including timestamp columns in the site map and search results tables, an optional final autosave on graceful exit, and a millisecond response timer in Repeater for verifying time-delay-based code injection tests. Scope rules can now be toggled individually, and Scanner and Spider support request throttling with optional random variations to avoid overwhelming flimsy applications and alerting pattern-based intrusion detection systems.

Why it matters: The throttling feature is aimed at a specific risk: fast automated scanning can trip pattern-based intrusion detection systems, so the tool now lets testers slow and randomize requests to stay quiet on a target network.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related