Covers: Vulnerabilities & PatchingSupply Chain & AppSecIdentity & Access ManagementData BreachesAI SecurityEndpoint & Network SecurityCloud SecurityZero-Days & ExploitsGovernance, Risk & CompliancePrivacy
PortSwigger released Burp Suite Professional and Community 2025.3.3 as a stable build on Wednesday, 23 April 2025 at 12:37 UTC. The release upgrades Burp's embedded browser to Chromium 135.0.7049.96 on Windows and Mac and 135.0.7049.95 on Linux. What's...
PortSwigger researcher Gareth Heyes released "Document My Pentest," an open-source Burp Suite extension that watches requests in real time and uses AI to build a structured record of a penetration test, generating notes from Repeater or proxy history....
PortSwigger lists Backslash Powered Scanner, a Burp Suite extension by James Kettle at version 1.30, as a complement to Burp's active scanner that uses a novel approach to find and confirm both known and unknown classes of server-side injection...
PortSwigger researcher Zak Fedotkin found that inserting an ASCII SOH control character (\x01) into Visual Studio Code run-configuration arguments causes the shell to split and misinterpret them, launching Calculator on macOS and Ubuntu instead of the...
RawHex'ler is a Burp Suite extension, version 0.1.2 by Sebastian Vetter and last updated 30 April 2025, that adds an integrated tab for manipulating raw HEX requests and responses in hexdump format. It does not replace the existing Hex editor tab; it adds...
PortSwigger published a walkthrough in which hacking expert John Hammond demonstrates Burp AI, a feature set in Burp Suite's web vulnerability scanner that the company says identifies subtle vulnerabilities automatically and reduces false positives....
PortSwigger's BApp Store lists a third-party Burp Suite extension called Bad Character Wordlist Generator, version 1.0.0, authored by Hashtag_AMIN and last updated 30 April 2025. The extension is designed to create wordlists of "bad characters" for...
PortSwigger released Burp Suite Professional and Community 2025.3.4 as a stable build on Wednesday, 7 May 2025 at 12:37 UTC. The release upgrades Burp's embedded browser to Chromium 136.0.7103.49 on Windows and Mac and 136.0.7103.59 on Linux, and fixes two...
PortSwigger released Burp Suite Professional / Community 2025.4.2 on 7 May 2025, adding a browser icon to the toolbar, removing the Search and Settings text labels, and moving an icon to the bottom of the side panel. The release also updates the Montoya...
PortSwigger shipped a year of Burp Suite Professional updates, including performance gains such as faster site map and table filtering, quicker scans with lower resource use, and faster display of large responses. The release also expanded Bambdas...
PortSwigger released Burp Suite Professional/Community 2025.5 on 15 May 2025, adding AI-powered custom actions in Burp Repeater that perform real-time, context-aware analysis of HTTP messages, with a sample action that explains selected text. The release...
PortSwigger announced Burp AI, a set of AI assistance features for Burp Suite Professional built to work alongside security professionals without replacing human expertise. The features aim to reduce false positives and suggest next steps during testing,...
PortSwigger released Burp Suite Professional and Community 2025.4.3 as a stable build on Wednesday, 21 May 2025 at 10:03 UTC. The release upgrades Burp's embedded browser to Chromium 136.0.7103.114 on Windows and Mac and 136.0.7103.113 on Linux. What's...
PortSwigger released Burp Suite Professional and Community 2025.5.1 on Wednesday, 21 May 2025, upgrading Burp's embedded browser to Chromium 136.0.7103.114 on Windows and Mac and 136.0.7103.113 on Linux. The release is available as installers for Windows,...
PortSwigger's BApp Store lists a third-party Burp extension called Sequence Comparer, version 1.0.0, last updated 22 May 2025, that enables advanced comparison of sequences of HTTP requests and their responses. The extension is aimed at analyzing...
PortSwigger renamed Burp Suite Enterprise Edition to Burp Suite DAST in its 2025.5 release, a change it says clarifies the distinction from Burp Suite Professional without altering the product experience. The release also adds tags for organizing sites and...
SQLiPy is a Burp Suite extension, version 0.8.6 by Josh Berry of CodeWatch, that integrates SQLMap through its API to run SQL injection scans on requests from within Burp. It connects to a running SQLMap API server, requires Jython 2.7-2.7.2, and is noted...
PortSwigger released Burp Suite Professional and Community Edition 2025.4.4 as a stable update on Friday, 23 May 2025. The release fixes a bug that caused scans to fail or run indefinitely when the Scanner did not identify any audit items during the crawl...
PortSwigger renamed Burp Suite Enterprise Edition to Burp Suite DAST, saying the old name led some organizations to assume it was only a multi-user version of Burp Suite Professional. The product runs on the same scanning engine used by over 17,000...
PortSwigger lists JWT Scanner, a Burp Suite extension by Dario Caluzi, Cyrill Bannwart and Tobias Hort-Giess, at version 2.1.0, last updated 29 May 2025, for automated testing of JSON Web Token implementations in web applications. The extension runs during...
PortSwigger's BApp Store lists Semgrepper, a third-party Burp Suite extension by Riccardo Cardelli (version 1.4, last updated 29 May 2025) that integrates Semgrep static analysis into passive scanning so users can apply custom Semgrep rules against HTTP...
PortSwigger received the King's Award for Enterprise in International Trade in 2025, one of 116 UK organizations honored, and it is the company's second such recognition after the Queen's Award in 2019. Founded in 2008 by Dafydd Stuttard, the company now...
PortSwigger's BApp Store lists AI Substitutor, a Burp Suite extension by Sergey Bobrov (BlackFan) that uses AI-powered features to automatically replace HTTP request parameters and headers with contextually relevant values. Version 1.0.0, last updated 03...
PortSwigger released Burp Suite DAST 2025.5.1 on Wednesday, 4 June 2025, a stable update that fixes a bug in how the scanner retries raising Jira tickets that have failed. The retry attempts are now less frequent, which the release notes say prevents...
PortSwigger released Burp Suite Professional and Community 2025.4.5 as a stable build on Monday, 9 June 2025 at 08:33 UTC. The release upgrades Burp's embedded browser to Chromium 137.0.7151.56 for Windows and Mac and 137.0.7151.55 for Linux. What's...
PortSwigger released Burp Suite Professional/Community 2025.5.2 on Monday, 9 June 2025, upgrading Burp's browser to Chromium 137.0.7151.56 for Windows and Mac and 137.0.7151.55 for Linux. The release also fixed a bug that caused scans to fail or run...
PortSwigger released Burp Suite Professional/Community 2025.6 on 12 June 2025, adding custom actions that automate message modification in Burp Repeater, a toggle for switching between single-row and multi-row tab views, and a built-in panel builder for...
PortSwigger released Burp Suite Professional and Community 2025.5.3 on 13 June 2025, adding AI-powered custom actions in Burp Repeater that perform real-time, context-aware analysis of HTTP messages. The release also adds a Montoya API SettingsPanel...
JWT4B is a Burp Suite extension, authored by Oussama Zgheb and at version 2.8.2 as of its 13 June 2025 update, that decodes and manipulates JSON web tokens on the fly, checks their validity, and automates common attacks. It stores settings in a config.json...
PortSwigger's BApp Store lists Pentagrid Scan Controller, a Burp Suite extension by Tobias 'floyd' Ospelt (version 0.2, last updated 13 June 2025) that filters and preprocesses requests for active scanning by assessing repeatability and injecting...