Professional 1.2.14
Summary: PortSwigger released Burp Suite Professional 1.2.14 on 12 August 2009, adding AMF support to all tools except Burp Intruder. Requests and responses with AMF-encoded bodies now display a decoded tree view with editable nodes, and Burp Scanner automatically places attack payloads within string-based AMF values.
Bottom line: AMF-encoded traffic was previously opaque to the scanner; this release makes those string values a place where attack payloads are automatically inserted, so any AMF endpoint in scope now gets tested without manual decoding.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026