Cyber Risks · PortSwigger Research

Professional 1.2.04

Summary: PortSwigger released Burp Suite Professional 1.2.04 on 5 March 2009, adding configurable DNS resolution that lets users specify hostname-to-IP mappings overriding the operating system's DNS. The release also adds finer-grained control of active scan checks, allowing specific SQL injection and OS command injection checks to be turned on and off.

What you should know: The DNS override exists so requests forward correctly when the hosts file has been modified to invisibly proxy traffic from thick client components that don't speak proxy - a reminder that the tools security teams rely on must account for traffic their standard controls never see.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related