Cyber Risks · PortSwigger Research

[MoBP] Deflate support

Summary: PortSwigger's Burp Suite has always been able to unpack GZIP-encoded responses but never supported deflate encoding, which appears occasionally in the wild. A new release adds native deflate support, replacing the workaround of Joe Hemler's plugin, and the Decoder may also be updated to unpack deflate-encoded content if time permits.

Why it matters: Deflate-encoded responses that Burp previously left packed could hide what a scanner or tester was meant to inspect, so teams relying on the tool should confirm they are on the release that handles this encoding natively.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related