HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
BLUF
Turbo Intruder adds HTTP/3 support to drastically increase fuzzing speed and coverage in Burp Suite.
NEWS
PortSwigger Research released an update enabling native HTTP/3 support within the Turbo Intruder extension for Burp Suite. The tool achieves speeds exceeding 100,000 requests per second over Wi-Fi and features automatic tuning for network conditions.
Why I Care
Modern applications increasingly rely on HTTP/3, and higher request volumes are often needed to bypass rate limiting or find race conditions. Ignoring this update risks missing critical bugs in high-performance environments or next-gen web protocols.
Next Steps
Penetration testers must update Burp Suite and the Turbo Intruder extension to the latest version immediately. Security teams should integrate HTTP/3 testing into their standard scanning procedures for all upcoming engagements by the end of this month.
Source: PortSwigger Research ·