[MoBP] Intelligent MIME type recognition
Summary: PortSwigger released a new version of Burp that uses heuristic rules to recognize most content types commonly used in web applications, rather than relying on the Content-type header. The post notes that this header is often wrong, citing a common example where a response labeled HTML is correctly identified as JavaScript in the proxy history's MIME type column.
What's compelling: If a scanner trusts the application's stated MIME type, it handles the response incorrectly and can miss vulnerabilities - which is why the tool now identifies content by its actual behavior instead of the label the server provides.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026