HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
Summary
PortSwigger Research has announced that their Turbo Intruder tool now supports HTTP/3. This enhancement allows for significantly increased request rates, potentially exceeding 100,000 requests per second over Wi-Fi, which could lead to the discovery of more vulnerabilities.
IFF Assessment
Support for HTTP/3 in Turbo Intruder means attackers can test targets at a much higher rate, potentially discovering vulnerabilities faster.
Defender Context
This update to Turbo Intruder signifies a significant leap in the speed and efficiency of web application penetration testing. Defenders should be aware that more sophisticated and rapid vulnerability discovery is now possible, potentially outpacing traditional detection methods. Organizations should ensure their intrusion detection and prevention systems are robust enough to handle high volumes of rapid, targeted requests.