Cyber Risks · PortSwigger Research

[V13P] Upstream proxy rules

Summary: PortSwigger added upstream proxy rules to Burp Suite, letting users set different proxy settings for different destination hosts or host ranges instead of one global configuration for all outgoing traffic. Rules use standard wildcards, apply in sequence with the first match winning, and default to direct, non-proxy connections when no rule matches.

What's compelling: A single global proxy setting meant every outgoing request from the scanner took the same path; per-destination rules now let teams route internal hosts through an internal proxy and everything else through an authenticated gateway, with an unmatched host silently going direct.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related