[Burp-users] burp-2.5.0 is now available
Brought to you by:
grke
|
From: Graham K. <gr...@gr...> - 2021-06-02 07:08:43
|
Hello, 2.5.0 is now the 'latest' version. 2.4.0 remains the 'stable' version. Here are the links: https://github.com/grke/burp/releases/tag/2.5.0 https://github.com/grke/burp/releases/tag/2.4.0 Changes in burp-2.5.0: * 826: Restrict permissions to Windows conf files. * 878: Fix missing newline when logged line is exactly 128 chars long. * Add SSL_get_error() detail in SSL accept and connect errors. >From the UPGRADING file: The Windows installer sets Administrator and SYSTEM full access permissions only on: C:/Program Files/Burp/bin/burp.conf C:/Program Files/Burp/bin/ssl_cert_ca.pem C:/Program Files/Burp/bin/ssl_cert-client.key C:/Program Files/Burp/bin/ssl_cert-client.pem That is, it runs: icacls.exe "<path>" /inheritance:r /grant:r Administrators:F SYSTEM:F If you have these files on non-default locations, and you are concerned about restricting permissions, you may want to run the command by hand on them. The Windows client will automatically apply the same permissions to new ssl cert files on certificate exchange. The code coverage stayed the same at 57.9% Special thanks go to the followng donors for financially supporting burp during May: * £20.00 Marcin W. * £20.00 Paul V. S. * £10.00 Gonzalo A. * £5.00 Eckart K. * £5.00 John K. |