Startup behavior - Port Swigger
Summary: PortSwigger's Burp Suite documentation describes a Startup behavior tab that controls the default state of two startup wizard settings: Pause Automated Tasks, which stops automated tasks from sending requests when Burp opens, and Trust this project, which guards against potentially harmful project settings. Both are user-level settings applying to all Burp installations on a machine, and the documentation states that even with these settings removed, proxying traffic through an untrusted project file is not recommended.
What's compelling: Opening a project file from an unknown or untrusted source can carry automated tasks that send requests and project settings that act against you, and the documentation's own guidance is that removing these protections still does not make proxying traffic through an untrusted project file safe.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026