Burp Suite's rate limit warning caught me off guard

I was doing a pentest for a client in Austin last week and Burp Suite flagged a request as exceeding the target's rate limit before I even hit send on the repeater tab. Turns out the free community edition silently caps you at like 1 request per second on active scans now, which I never noticed because I mostly do manual testing. It surprised me because I thought that throttle only applied to the scanner, not basic forwarding. Found the detail buried in a changelog note from the 2024.9 update on their support site. So I ran a quick script to pace my requests and got the job done, but it definitely shook my workflow for an afternoon. Has anyone else hit this hidden cap on the community tier? Or am I just late to the party here?

0 comments

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.