Results

DAST

Adding extensions to Burp Suite DAST

When you add extensions to Burp Suite DAST, they are uploaded to your Extension library. Users can then apply extensions from this central repository on a ...

DAST

Managing updates

Self-hosted This page explains how to manage updates for standard instances of Burp Suite DAST. Applying updates might result in some downtime. Note To ...

PROFESSIONAL COMMUNITY

Setting up your extension development environment using the starter project

The starter project simplifies extension development using the Montoya API. Instead of setting up your development environment manually, you can download ...

DAST

Coding custom integrations with GraphQL API

Cloud Self-hosted If Burp Suite DAST doesn't have a built-in integration for the platform where your APIs are stored, you can use the GraphQL API to push ...

PROFESSIONAL COMMUNITY

Testing for directory traversal vulnerabilities with Burp Suite

Directory traversal vulnerabilities (also known as file path vulnerabilities) allow an attacker to read arbitrary files on the server that is running an ...

DAST

Integrating a CI-driven scan with no dashboard with GitHub Actions

You can integrate a no-dashboard scan with GitHub Actions. This enables you to use Burp Scanner to run scans as a stage in your existing CI/CD pipeline, and ...

PROFESSIONAL

Importing custom scan checks into your library

You can import custom scan checks into your library that have been shared with you or downloaded from our Bambda scripts repository or BChecks repository. ...

DAST

Configuring SAML single sign-on for Burp Suite DAST

Cloud Self-hosted Burp Suite DAST supports SAML-based single sign-on (SSO). This allows users to log in with their existing credentials. Note You can also ...

PROFESSIONAL COMMUNITY

Determining the session timeout

When a user doesn't use an application for a certain amount of time, most applications will automatically log out the user and destroy their session. To ...

DAST

Managing extensions in Burp Suite DAST

This page explains how to view and remove existing extensions. To display a list of current extensions: Log in to Burp Suite DAST as a user with permission ...