PortSwigger Web Security · Report #294891

Improper Certificate Validation

Informativestatus

lowseverity

2 Jan 2018disclosed

How it was found

Obtained a key from PortSwigger official site.
Downloaded latest version of burp 1.7.29 from PortSwigger and activated license.
Downloaded previous version of burp v1.7.17 and used same key for the activation.

And, I was able to activate license on the old version of BurpSuite.

Single license can be used for multiple users.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original