The model isn't cooperating

Making HTTP header injection critical with one prompt

You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just introduced a new scan check for

Smashing the token limit with overlapping fragments

HTTP/3 in Burp Suite - it’s time to find a bigger wordlist