Results

PROFESSIONAL

Reporting scan results

After you use Burp Scanner to scan a target, you can generate a report in HTML format for some or all of the issues found. This enables you to share the ...

DAST

Integrating a CI-driven scan with TeamCity

Cloud Self-hosted This page contains instructions to integrate a CI-driven scan with TeamCity. This enables you to use Burp Scanner to run scans as a stage ...

DAST

Configuring API authentication

Cloud Self-hosted Host credentials vs API authentication When working with API definitions, you may need to provide two different types of credentials: Host ...

PROFESSIONAL COMMUNITY

Sending grouped HTTP requests

Burp Repeater's Group send options feature enables you to send grouped HTTP requests with a single click. You can send requests either in parallel (all at ...

PROFESSIONAL COMMUNITY

Installing extensions from the BApp Store

The BApp Store contains community-created extensions that you can install directly from Extensions > BApp Store in Burp with a single click. We review ...

DAST

Setting up your external database (Kubernetes)

In this section, we'll show you how to set up a database that you want to connect to Burp Suite DAST. Preparing the database for Burp Suite DAST involves ...

DAST

Setting the site scope

Cloud Self-hosted When scanning a web app, the site scope defines which URLs you want to scan, and which you don't want to scan. Burp Scanner only visits ...

PROFESSIONAL

Configuring authentication for API scans

This topic explains how to configure authentication for API-only scans in Burp Suite Professional. Setting up authentication credentials enables Burp ...

DAST

Network and firewall settings for self-hosted scanning machines

Cloud You need to configure your network and firewall to allow your self-hosted scanning machines to communicate with your Cloud instance of Burp Suite ...

PROFESSIONAL COMMUNITY

Testing for SQL injection vulnerabilities with Burp Suite

SQL injection vulnerabilities occur when an attacker can interfere with the queries that an application makes to its database. You can use Burp to test for ...