界面展示
相关课程
data-postsbox="{"id":11474,"title":"【零基础学渗透】工具篇——BurpSuite","author":"Sec-Labs","author_id":10015,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/03/20220313155529975.png","cover_video":"","views":9400,"comment_count":663,"category":"cybersecurity","is_forum_post":false}">{"id":11474,"title":"【零基础学渗透】工具篇——BurpSuite","author":"Sec-Labs","author_id":10015,"cover_image":"https://static.pigsec.cn/wp-content/uploads/2022/03/20220313155529975.png","cover_video":"","views":9400,"comment_count":663,"category":"cybersecurity","is_forum_post":false}
相关阅读
data-postsbox="{"id":11627,"title":"最新BurpSuite2022.2.3破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2408,"comment_count":3,"category":"software","is_forum_post":false}">{"id":11627,"title":"最新BurpSuite2022.2.3破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2408,"comment_count":3,"category":"software","is_forum_post":false}
data-postsbox="{"id":10913,"title":"最新BurpSuite2022.2.2破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2731,"comment_count":4,"category":"software","is_forum_post":false}">{"id":10913,"title":"最新BurpSuite2022.2.2破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2731,"comment_count":4,"category":"software","is_forum_post":false}
data-postsbox="{"id":10614,"title":"最新BurpSuite2022.2.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":1791,"comment_count":4,"category":"software","is_forum_post":false}">{"id":10614,"title":"最新BurpSuite2022.2.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":1791,"comment_count":4,"category":"software","is_forum_post":false}
data-postsbox="{"id":9693,"title":"最新BurpSuite2022.1.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3088,"comment_count":1,"category":"software","is_forum_post":false}">{"id":9693,"title":"最新BurpSuite2022.1.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3088,"comment_count":1,"category":"software","is_forum_post":false}
data-postsbox="{"id":8823,"title":"BurpSuite2022.1最新专业版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3640,"comment_count":6,"category":"software","is_forum_post":false}">{"id":8823,"title":"BurpSuite2022.1最新专业版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3640,"comment_count":6,"category":"software","is_forum_post":false}
data-postsbox="{"id":7490,"title":"最新BurpSuite2021.12.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2038,"comment_count":3,"category":"software","is_forum_post":false}">{"id":7490,"title":"最新BurpSuite2021.12.1破解版下载","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":2038,"comment_count":3,"category":"software","is_forum_post":false}
data-postsbox="{"id":4106,"title":"最新BurpSuite2021.10.2破解版","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3238,"comment_count":2,"category":"software","is_forum_post":false}">{"id":4106,"title":"最新BurpSuite2021.10.2破解版","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":3238,"comment_count":2,"category":"software","is_forum_post":false}
data-postsbox="{"id":1610,"title":"BurpSuite 2021年8月最新版pro_v2.1.06 全攻略","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7028,"comment_count":245,"category":"software","is_forum_post":false}">{"id":1610,"title":"BurpSuite 2021年8月最新版pro_v2.1.06 全攻略","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7028,"comment_count":245,"category":"software","is_forum_post":false}
通用破解思路,适用2021/2022.X全版本
data-postsbox="{"id":8835,"title":"BurpSuite2021.X | 2022.X | 2023.X任意最新专业版破解思路","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7839,"comment_count":26,"category":"software","is_forum_post":false}">{"id":8835,"title":"BurpSuite2021.X | 2022.X | 2023.X任意最新专业版破解思路","author":"FancyPig","author_id":1,"cover_image":"","cover_video":"","views":7839,"comment_count":26,"category":"software","is_forum_post":false}
更新说明
从2.3更新到3.1版本主要更新了以下内容
此版本为 Burp Repeater 提供了以下错误修复:
- 手动跟踪重定向时,您不再陷入无限重定向循环。
- 发送后,消息编辑器中的光标不再跳转到请求的开头。
浏览器升级
此版本还将 Burp 的浏览器升级到 Chromium 99.0.4844.84
可自定义的消息编辑器选项卡
除了现有的Pretty、Raw、Hex和Render选项卡之外,您现在还可以将以下选项卡添加到消息编辑器中:
- Headers
- Query params
- Body params
- Cookies
- Attributes
其中一些选项卡在旧版本的 Burp Suite 中可用,但现在已经重新引入和增强,具有与 Inspector 处理 HTTP 消息相同的强大功能。如果您想利用 Inspector 的功能,但屏幕上没有用于侧面板的空间,这是一个很好的选择。
要控制显示哪些选项卡以及显示顺序,请单击消息编辑器右上角的设置图标(在Inspector面板上方),然后选择Message editor。
公共 Burp Collaborator 服务器的新域名
我们为公共 Burp Collaborator 服务器添加了一个新域名。除非您已将 Burp 配置为使用私有 Collaborator 服务器,否则 Burp Scanner 和 Burp Collaborator 客户端现在将使用oastify.com其 Collaborator 有效负载而不是burpcollaborator.net. 这将有助于减少误报,使您能够识别以前由于旧域名被广泛阻止而隐藏的带外漏洞。
这个新域名是旧域名的补充,因此您仍然可以看到与任何现有burpcollaborator.net负载的交互。
请注意,如果您在封闭网络中运行 Burp,并且之前必须允许连接到burpcollaborator.net端口 443 才能轮询交互,您可能需要对oastify.com.
检测依赖 API 调用的基于 DOM 的漏洞
如果需要正确加载页面,Burp Scanner 的动态 JavaScript 分析现在可以从范围外的 API 端点获取数据。这使其能够检测基于 DOM 的漏洞,其中恶意输入仅在进行 API 调用时才传递到接收器。
请注意,尽管 Burp Scanner 会在需要时获取外部资源和数据,但它不会对超出范围的 URL 执行任何额外的爬取或审核。
选择时,选项卡行不再切换位置
在 Burp 的早期版本中,当您有多行选项卡时,选定的行会自动移到底部。这可能会使跟踪选项卡的顺序变得困难,这在 Burp Repeater 中尤其不方便。
我们现在已禁用此行为,因此选项卡在选中时不再移动。
安全修复
我们已将 Burp 的浏览器升级到Chromium 99.0.4844.74,它修复了一个严重错误和一些高/中等严重性错误。
Bug修复
此版本还提供了许多错误修复。最为显着地:
- 当 HTML标记
onload中的事件处理程序触发重定向时,Burp Scanner 不再有问题。<body> - 我们修复了一个错误,该错误会阻止您在某些消息编辑器面板中阅读或编辑长行 JSON。
- 我们修复了启动 Burp 时出现的初始屏幕上的语法错误。
工具下载
解压密码
www.pigsec.cn