Professional 1.2.06
Summary: PortSwigger released Burp Suite Professional 1.2.06 on 16 April 2009, adding Scanner support for REST-style URL parameters so path segments like "cars" and "red" in /cars/red/diesel/2004/ShowDetails are tested for input-based vulnerabilities, with the option off by default to limit scan requests. The release also added fully customisable attack insertion points via Intruder, XML-aware payload position placement in multipart request bodies, copy-to-file and paste-from-file in message displays, and Alt-F and Alt-D shortcuts to forward or drop messages in the Proxy intercept tab.
Why it matters: REST-style parameters are off by default, so any team that assumes its scanner covers path-based data without enabling the option is leaving those inputs untested.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026