BURP SUITE PROFESSIONAL BETA DOWNLOAD

Thanks to several people who pointed this out to me!! If anyone has any information on when to expect it please let me know!ĮDIT: This is completely false! The REST API was there the whole time.

Unfortunately I was let down and as far as I can tell the release date for the REST API is still TBD.

BURP SUITE PROFESSIONAL BETA DOWNLOAD

I was most excited to download 2.0 because I assumed it would be included in this version and I desperately want to play with it. earlier this week PortSwigger announced they are building a REST API for Burp Suite. I’m excited to see what new features and enhancements come out of this version in future releases.

That’s a good thing btw! I suspect some people (particularly those who are change averse) will take offense to the new UI and the removal of familiar tabs but I imagine after they spend some time playing around like I had they’ll come to terms with it. Once you get over the initial shock and awe of the new dashboard view the rest of Burp is still just Burp. This speeds the scan and also greatly reduces the amount of “noise” you find in the results. One of the first things I did was simply create a scan profile to exclude all “Informational” checks. Maybe these options existed in previous releases and I simply hadn’t made use of them but I thought it was a cool feature. Again I feel this is a positive change as it enhances the intuitive feel of the application and overall user experience.Īlso their appeared to be some noticeable improvements in the granularity of scan profile configuration. This feels a lot more like Nessus or Acunetix or any other more commercially used automated scan engines. These buttons simply launch a menu/wizard driven experience to completely replace the scan tab and all of its options. Its hard to miss the bright green buttons at the top of the dashboard which control starting a new vulnerability scan and enabling live scanning of proxy traffic. None the less, I found myself disappointed that I had to enter a username/password each time I wanted to launch a credentialed crawl task. I suppose this is probably a feature to protect insecure storing of credentials. One thing I did notice was the inability to save a set of credentials to the library for later use. I don’t have much to say about the new crawler in regards to it being better or more accurate then the old spider but I thought the configuration wizard that pops up when you launch a new scan was intuitive and therefore hard to mess up. It has been completely replaced with a brand new crawler which you can read about here. Not long after starting to test an app you’ll notice right away the spider tab has been removed entirely.

I’m definitely in favor of these change and hope it permeates into deeper areas of the application. These components are not only detachable but highly configurable with handy settings buttons intuitively placed in the upper right corner of each pane. The dashboard has three major sections: Tasks, Event log and Issue activity. Kudos to PortSwigger for making the new dashboard both cosmetically appealing and functionally an improvement over the previous dashboard which was essentially just the Target tab. Obviously the first thing you’ll likely notice about the interface is a completely new dashboard that you’re welcomed with when you startup a fresh Burp Suite project. Keep in mind I just upgraded this morning and my experience, analysis and opinion is based on only a couple of hours playing around. In this article I’m going to cover just a few key highlights that I think are important. A lot of changes have been made with PortSwigger’s recent release of Burp Suite 2.0! You can see a complete list of all the new goodies by reading the release notes.

Burp suite professional beta