Setting Java options - Port Swigger

Summary: PortSwigger documents a user.vmoptions file that configures standard Java Virtual Machine options for Burp Suite, such as heap size and RAM usage, and persists across upgrades unlike the default vmoptions file. The file is created by copying the default vmoptions file - BurpSuite.vmoptions on Windows and Linux, vmoptions.txt on Mac - renaming it to user.vmoptions, and adding each option on a new line.
What you should know: The file cannot configure any options for Burp Suite itself, only the JVM it runs in, so a team expecting it to change scanner behavior will find the setting has no effect.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026