0% found this document useful (0 votes)
104 views2 pages

Burp Suite Pro Changelog Updates

Uploaded by

sudosug0zadinhas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
104 views2 pages

Burp Suite Pro Changelog Updates

Uploaded by

sudosug0zadinhas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

BurpSuite Pro Changelog for last few versions -pwn3rzs

Professional / Community 2023.6.1


Early Adopter
Released Thursday, 15 June 2023

We have upgraded Burp's built-in browser to 114.0.5735.133 for Mac and Linux and
114.0.5735.133/134 for Windows. This update contains multiple security fixes.
Usage of this software is subject to the licence agreement.

============================================

Professional / Community 2023.5.4


Stable
Released Thursday, 15 June 2023

Bug fix

We have fixed an issue whereby Burp�s browser was unable to start on some Linux
distributions.
Browser upgrade

We have upgraded Burp's built-in browser to 114.0.5735.133 for Mac and Linux and
114.0.5735.133/134 for Windows. This update contains multiple security fixes.

============================================

Professional / Community 2023.6


Early Adopter
Released Wednesday, 7 June 2023

This release introduces BChecks, which are custom scan checks. It also provides
improvements to Burp Scanner's live crawl path views, GraphQL scan checks, and a
number of additional improvements and bug fixes.

Custom scan checks

This release introduces BChecks, which are scan checks that you can create and
import. Burp Scanner runs these checks in addition to its built-in scanning
routine. This enables you to fine-tune your scans and make your testing workflow as
efficient as possible.

You can use our custom definition language to easily create BChecks. Burp includes
a range of templates to get you started.

We have also created a BChecks GitHub repository. This includes example BChecks
from PortSwigger, as well as BChecks developed by the Burp Suite community. We look
forward to accepting pull requests and celebrating your awesome work.

In the future, we're planning to improve the BCheck language and testing
experience. We'd love your feedback. Contact our support team at
support@[Link].
Live crawl paths view improvements

We have made a number of improvements to Burp Scanner's live crawl paths view:

You can now view details of all the possible navigation actions that the
crawler was able to take from a given location on the crawl path. This enables you
to better understand the structure of your site. To view these details, go to the
Crawl paths > Outlinks tab of the scan task details window.
You can now view a screenshot of Burp's browser at any crawl location. Go to
the Crawl paths tab of the scan task details window and click Show screenshot.
The shortest crawl path tree is now retained when you reopen a project file.

GraphQL scan checks

We have introduced a number of GraphQL scan checks. The new scan checks enable you
to:

Identify and maintain a list of any GraphQL endpoints discovered during the
crawl.
Identify if introspection queries are enabled.
Find out if GraphQL suggestions are enabled.
Test for CSRF vulnerabilities in all discovered GraphQL endpoints.

Montoya API

We have updated the Montoya API, to enable you to create extensions with additional
functionality. You can now:

Convert ByteArray data to different integer bases. This means you no longer
need to use additional libraries to complete this task.
Log exceptions to the error output. This means that you don't need to format
and convert exceptions manually.

Other improvements

We have made a number of additional improvements, including:

You can now quickly switch to the Organizer tab using the hotkey Ctrl + Shift +
O.
In the Issue activity table on the Dashboard, you can now filter issues by your
target scope.
We have changed the way we launch Burp's browser. It now works with accounts
for sites that fingerprint the presence of the DevTools listener, such as Google
accounts.

Bug fixes

We fixed a number of minor bugs:

If you change the highlight in the Organizer table, it no longer deselects the
current row.
For Burp Suite Community Edition, filters are now correctly applied to Intruder
attack results.

Browser upgrade

We have upgraded Burp's built-in browser to 114.0.5735.110 for Windows and


114.0.5735.106 for Mac and Linux. This update contains multiple security fixes.

...

Common questions

Powered by AI

The ability to quickly switch to the Organizer tab using the hotkey Ctrl + Shift + O is beneficial because it streamlines navigation within the Burp Suite interface, enhancing efficiency for users who need to manage tasks or activities frequently within the application. This improvement contributes to a more streamlined testing process .

Recent Burp Suite updates have fixed several minor bugs, including correcting filter application in Intruder attack results for the Community Edition and ensuring highlight changes in the Organizer table don't deselect the current row. These fixes improve functionality by providing a more reliable and predictable user experience, reducing potential disruptions during testing workflows .

The recent upgrades to Burp's built-in browser across various platforms (Mac, Linux, Windows) include multiple security fixes. These upgrades are critical as they close vulnerabilities that could be exploited by attackers, thereby ensuring the software remains secure and reliable for users conducting vulnerability assessments or penetration testing .

The recent improvements to the Issue activity table on the Burp Suite Dashboard allow users to filter issues by their target scope. This refinement aids users in monitoring their scans by enabling focused analysis on specific areas of interest, reducing clutter and increasing the precision of their vulnerability assessments .

The latest update to Burp Suite introduces several enhancements to GraphQL scan checks. These updates enable users to identify and maintain a list of discovered GraphQL endpoints, test if introspection queries and suggestions are enabled, and check for CSRF vulnerabilities across all detected GraphQL endpoints .

The new method for launching Burp's built-in browser is designed to work with accounts for sites that fingerprint the presence of the DevTools listener, such as Google accounts. This change enhances the user experience by ensuring reliable browser functionality and seamless access to such sites, overcoming previous compatibility issues .

BChecks are custom scan checks introduced in Burp Suite that allow users to create and import personalized checks to augment the built-in scanning routine. This feature enables users to fine-tune their scans, improving the efficiency of their testing workflow. Burp includes a custom definition language and a range of templates to help users get started with BChecks. There's also a GitHub repository for sharing and obtaining BChecks examples from the PortSwigger community .

The live crawl path view in Burp Suite is enhanced to show all possible navigation actions from a given location on the crawl path. Users can now view details about these actions and access screenshots of Burp's browser at any crawl location. Additionally, the shortest crawl path tree is retained upon reopening a project file. These improvements help users better understand site structure by visualizing navigation paths and crawl dynamics .

Burp Suite's features, such as the introduction of GraphQL scan checks, represent its evolution to support modern web technologies. These features enable users to identify GraphQL endpoints, test for introspection queries, and detect CSRF vulnerabilities, matching the complexity and demands of contemporary web applications. These evolutions underscore Burp Suite's adaptability and commitment to providing comprehensive security testing tools for new and emerging frameworks .

The updated Montoya API in Burp Suite now allows users to convert ByteArray data to different integer bases without needing additional libraries, providing streamlined functionality for extension developers. It also includes the ability to log exceptions to the error output, removing the need for manual formatting and conversion. These capabilities are significant as they enhance flexibility and efficiency in extension development .

You might also like