Results

DAST

Setting the site scope

Cloud Self-hosted When scanning a web app, the site scope defines which URLs you want to scan, and which you don't want to scan. Burp Scanner only visits ...

DAST

Migrating to an external database

Self-hosted If you are using Burp Suite DAST's bundled H2 database, you can migrate to an external one at any time. The migration process involves the ...

DAST

Integrating a CI-driven scan with TeamCity

Cloud Self-hosted This page contains instructions to integrate a CI-driven scan with TeamCity. This enables you to use Burp Scanner to run scans as a stage ...

PROFESSIONAL DAST

Crawling

The crawl phase is usually the first part of a scan. During the crawl phase, Burp Scanner navigates around the application. It follows links, submits forms, ...

PROFESSIONAL DAST

Burp Infiltrator

Burp Infiltrator is a tool for instrumenting target web applications in order to facilitate testing using Burp Scanner. Burp Infiltrator modifies the target ...

DAST

Configuring API authentication

Cloud Self-hosted Host credentials vs API authentication When working with API definitions, you may need to provide two different types of credentials: Host ...

DAST

Setting up the external database (Standard)

In this section, we'll show you how to set up a database that you want to connect to Burp Suite DAST. This is relevant in the following cases: You want to ...

DAST

Setting up your external database (Kubernetes)

In this section, we'll show you how to set up a database that you want to connect to Burp Suite DAST. Preparing the database for Burp Suite DAST involves ...

DAST

System requirements for standard instances

You can set up a standard instance of Burp Suite DAST either on-premise, or on cloud-hosted virtual machines. The system requirements for Burp Suite DAST ...

DAST

Planning to deploy Burp Suite DAST

To ensure that your deployment of Burp Suite DAST runs smoothly, you should take some time to prepare before beginning the process. This gives you an ...