Download Burp Suite Professional: Unlocking Advanced Features

Burp Suite Professional is an advanced web security testing tool that offers a range of features to help you identify vulnerabilities and improve your overall security posture. In this article, we'll explore some of the key improvements in the latest release of Burp Suite Professional.

HTTP/1 Keep-Alive

One of the most significant benefits of using Burp Suite Professional is its ability to reuse TCP connections for HTTP/1 requests. This means that you can send multiple requests using a single connection, which can significantly improve request speed and timing accuracy.

To enable HTTP/1 keep-alive, simply go to Project options > HTTP > HTTP/1 and select the Use keep-alive for HTTP/1 if the server supports it option. This feature is particularly useful in cases where you want to see every single message being sent.

Enhanced DOM Invader

Burp Suite Professional also includes several key improvements to its DOM Invader feature. These include the ability to test for client-side prototype pollution, disable specific sources and sinks to reduce noise, and set a callback function for each sink, source, and message that DOM Invader finds.

The Messages view has also been improved, providing more detailed information about each message, including the frame that it was sent from and the frame that it was sent to. This can help you analyze vulnerabilities and potentially craft exploits.

Augmented DOM View

The augmented DOM view has also been updated to provide additional information to help you analyze vulnerabilities and craft exploits. This includes displaying information such as the frame path, outer HTML of the element, and event that occurred when your payload was passed to the sink.

Intruder and Repeater Improvements

Burp Suite Professional also includes several key improvements to its Intruder and Repeater features. These include the ability to select between a scrolling or wrapped tab view for both tools, as well as the ability to organize tabs into groups in Repeater.

Additionally, you can now search for individual tabs or groups using the new search function in the tab bar. This makes it easier than ever to work with large numbers of open tabs and keep track of related requests.

Burp Suite Professional is a powerful tool that offers a range of features to help you improve your web security testing capabilities. With its ability to reuse TCP connections for HTTP/1 requests, enhanced DOM Invader feature, and improved Intruder and Repeater tools, this release is a must-have for anyone serious about web security.

To learn more about the new features in Burp Suite Professional, be sure to check out the following video overview from PortSwigger researcher and creator of DOM Invader, Gareth Heyes. With its advanced features and user-friendly interface, Burp Suite Professional is an essential tool for any web security professional.

Download burpsuite professional