Cyber Risks · PortSwigger Research

Professional 1.2.09

Summary: PortSwigger released Burp Suite Professional 1.2.09 on 26 May 2009, adding extensibility APIs: IBurpExtender gains processHttpMessage and newScanIssue methods, and IBurpExtenderCallbacks adds methods to read proxy history and site map, save and restore state, parse parameters and headers, plus a doActiveScan that now returns an IScanQueueItem. The release introduces three new interfaces in the burp package - IHttpRequestResponse, IScanIssue and IScanQueueItem - and describes using them to automate periodic scanning of an application by restoring a saved site map, spidering for new content, launching active scans, and saving state afterward.

Bottom line: The newScanIssue hook fires only on unique issues after consolidation, so an extension built on it sees each finding once rather than the duplicates that can appear when the same request is scanned multiple times.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related