The updated Burp suite scanner has new add-on features and bug fixes that enhance the scanning process’s overall performance.
Burp Suite is an integrated platform/graphical tool for performing security testing of web applications.
On 27 July 2023, Portswigger released all improved versions of Burpsuite, including the reuse of HTTP/1, customizable SNI values, browser updates, and bug fixes.
The new facility lets the users reuse and control HTTP/1 connections to speed up attacks found in Intruder > Settings > HTTP/1 connection reuse.
Users can enable Unrecognized project files settings to open files from unknown sources safely.
Also, users can set intermediate certificates when a new PKCS#11 certificate is added for hardware tokens and smart cards.
SNI values can be customized in Repeater, reproducing external service interaction issues detected by Scanner.
To improve scan efficiency, they have included Crawl Tab in the target tool to display the path information populated from all the scans.
In addition to that, the Isolated scan feature is included to test settings without impacting “live” scan results.
Burp Scanner can now run introspection queries on GraphQL endpoints to gain information on available queries and mutations.
A new Automatic throttling setting is added to the Resource pool section of the scan launcher.
The crawl optimization technique is tuned to reduce the chance of interesting content being missed.
Also, they have improved minor bugs found in their old versions below
They upgraded Burp’s built-in browser to 115.0.5790.110 for Windows and Linux and 115.0.5790.114 for Mac.
Keep yourself informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.
A sophisticated malware campaign leveraging GitHub repositories disguised as game modifications and cracked software has…
Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000 malicious…
A new wave of cyberattacks leveraging the Winos4.0 malware framework has targeted organizations in Taiwan…
A sweeping analysis of the Common Crawl dataset—a cornerstone of training data for large language…
The Lotus Blossom hacker group, also known as Spring Dragon, Billbug, or Thrip, has been…
A newly identified malware, dubbed "Squidoor," has emerged as a sophisticated threat targeting government, defense,…