Cyber Risks · PortSwigger Research

Professional 1.2.12

Summary: PortSwigger released Burp Suite Professional 1.2.12 on 3 July 2009, adding a "find references" feature that searches all of Burp's tools for HTTP responses linking to a selected request, URL, domain, or folder, treating the original URL as a prefix. The release also added a configurable background autosave of Burp's state that persists across reloads, an option to URL-encode characters like & and = as you type in the HTTP message editor, and a change making live active scanning ignore requests for media resources that contain no non-cookie parameters.

What's compelling: The scanner now skips media requests with no non-cookie parameters as having no security significance, so any finding that depends on those requests only surfaces if an operator manually selects and sends them for active scanning.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related