This release adds the ability to export SMTP Collaborator interactions as email files, expands hotkey and title bar customization, and improves command palette performance. It also includes a range of bug fixes.
Export SMTP Collaborator interactions as email files
You can now export individual SMTP interactions from Burp Collaborator as .eml files.
Select a single SMTP interaction and choose Export email (.eml) from the context menu. The exported file includes the email content and relevant Collaborator metadata, and can be opened in standard email clients.
More actions available for hotkeys and the title bar
You can now assign a hotkey to every action listed in the Hotkeys settings, including actions that couldn't previously be assigned one.
We've also expanded the range of actions you can add to the title bar, making it easier to keep the actions you use most often within easy reach.
Improved command palette performance
We've improved command palette performance, reducing lag when searching and navigating through large numbers of actions.
Other improvements
We've renewed the bundled self-signed PortSwigger TLS certificate ahead of its expiry. This is separate from the Burp CA certificate that you install in your browser, so no action is required.
Bug fixes
We've made the following fixes:
- Fixed an issue where testing a response body match-and-replace rule against longer responses could cause Burp to become unresponsive.
- Burp AI is now available under Settings > Project > Logging, where you can configure request and response logging for it. Previously, Burp AI traffic was not captured when logging was enabled for All tools. This traffic is now included.
- Fixed an issue where Burp could fail to create projects under restrictive AppLocker or Windows Defender Application Control (WDAC) policies. Required native libraries are now loaded from the Burp installation directory instead of temporary storage.
- Fixed an issue in the Montoya API where
ByteArray.indexOf(Pattern, startIndexInclusive, endIndexExclusive)could throw aStringIndexOutOfBoundsExceptionfor a valid, in-bounds range. Valid ranges no longer cause this exception. - Burp Scanner now evaluates Content Security Policy directives more accurately, including
default-srcfallback behavior and directives containing unparseable source expressions. This fixes false negatives that could cause some CSP issues to be missed.