Results

PROFESSIONAL COMMUNITY

Discovering supported hostnames with Burp Suite

You can use Burp Intruder to discover additional, hidden hosts that are in scope but aren't explicitly linked from the initial set of domains you're ...

DAST

Importing sites in bulk

Cloud Self-hosted Burp Suite DAST's bulk site upload feature makes it easier for you to add large numbers of sites to the system. Note Your scanning ...

DAST

Using custom scan configurations

Cloud Self-hosted In addition to the Burp Suite DAST preset scan modes, you can create and import custom configurations. This section explains how to create ...

PROFESSIONAL COMMUNITY

Bypassing client-side controls

Some applications rely on measures on the client side to control the data that they submit to the server. This can lead to significant security flaws, as ...

DAST

Which deployment method is right for me?

Which deployment method is right for me?

DAST

Setting up email notifications

Cloud Self-hosted Setting up email notifications can help you to keep up to date with your organization's security posture. When you configure email ...

DAST

Coding custom integrations with GraphQL API

Cloud Self-hosted If Burp Suite DAST doesn't have a built-in integration for the platform where your APIs are stored, you can use the GraphQL API to push ...

DAST

Managing groups locally

Cloud Self-hosted Groups allow you to map users to their relevant roles. This enables you to assign the permissions for a chosen set of roles to all the ...

DAST

Installing the application (Kubernetes)

Burp Suite DAST uses Helm to manage installation and configuration. In order to install the application you first need to download its Helm chart. ...

PROFESSIONAL COMMUNITY

Guessing usernames for known users

Burp Intruder has a built-in username generator that takes an input and produces a list of potential usernames using common patterns. For example, if you ...