Skip to content

Burp Sensitive Scanner v1.0.1

Choose a tag to compare

@naroSEC naroSEC released this 11 Sep 13:24
· 5 commits to main since this release

Fixes Java heap exhaustion when scanning large Burp projects.

  • Streams Proxy History and Site Map transactions directly into deduplication and detection
  • Skips oversized Montoya messages before copying their request or response bytes
  • Removes repeated defensive byte-array copies from fingerprinting and scan paths
  • Adds byte budgets for live capture, Logger imports, and raw HTTP messages retained by findings
  • Caps findings and throttles Swing progress updates to prevent UI queue growth
  • Shows a concise recovery message if the Burp JVM still runs out of heap

SHA-256: A966CE441FC8A387658C78701785F387BA49C34C9AC74078465F7ECFA1942F58