Burp Suite 2022.5.1 Version released

PortSwigger has released a new version of Burp Suite 2022.5.1 for Professional and Community users that contains numerous bug fixes.

The Burp Suite is the ultimate toolset for web application pentesters with a complete set of tools as given below:-

• Proxy
• Target
• Scanner
• Spider
• Intruder
• Repeater
• Collaborator client
• Clickbandit
• Sequencer
• Decoder
• Extender
• Comparer

The tool is written in Java, that can be used to test web applications from the browser. One new feature set added to the suite is JWT scan checks.

To estimate the system impact, the following categories are used:-

• Memory
• CPU
• Time
• Scanner
• Overall

The newly added features and improvements in Burp Suite 2022.5.1:-

1. The list of insertion points for scanning, expanded to include Google Analytics cookies that are commonly used.
2. Identification of locations to audit after the crawl is complete in order to improve the performance of the Burp Scanner.
3. Individual timeouts for crawl that will override global config settings
4. Improved Repeater tab behavior
5. Set headers in session handling options
6. Skip unauthenticated crawling during scans
7. Verify upstream TLS
8. Browser upgrade (Chromium 102.0.5005.61)
9. Changes to Java requirements

Here below we have mentioned all the bug fixes:

1. Performance issues that some users faced when using Intruder with large resource pools.
2. Issue fixation of Intruder’s Copy attack config menu item was sometimes unresponsive.
3. Scan configuration improvement of Crawl using my provided logins only setting was not displaying correctly on the edit configuration menu.
4. The live passive crawl task was not automatically processing responses pushed from Repeater.