Results

DAST

Setting the site scope

Cloud Self-hosted When scanning a web app, the site scope defines which URLs you want to scan, and which you don't want to scan. Burp Scanner only visits ...

PROFESSIONAL

Configuring authentication for API scans

This topic explains how to configure authentication for API-only scans in Burp Suite Professional. Setting up authentication credentials enables Burp ...

DAST

Migrating to an external database

Self-hosted If you are using Burp Suite DAST's bundled H2 database, you can migrate to an external one at any time. The migration process involves the ...

DAST

Integrating a CI-driven scan with TeamCity

Cloud Self-hosted This page contains instructions to integrate a CI-driven scan with TeamCity. This enables you to use Burp Scanner to run scans as a stage ...

PROFESSIONAL DAST

Crawling

The crawl phase is usually the first part of a scan. During the crawl phase, Burp Scanner navigates around the application. It follows links, submits forms, ...

PROFESSIONAL

Custom actions writing guide

Custom actions are scripts that run directly in Burp Repeater to automate tasks and extract information during manual testing. This page includes useful ...

PROFESSIONAL COMMUNITY

Installing extensions from the BApp Store

The BApp Store contains community-created extensions that you can install directly from Extensions > BApp Store in Burp with a single click. We review ...

PROFESSIONAL DAST

Burp Infiltrator

Burp Infiltrator is a tool for instrumenting target web applications in order to facilitate testing using Burp Scanner. Burp Infiltrator modifies the target ...

DAST

Configuring API authentication

Cloud Self-hosted Host credentials vs API authentication When working with API definitions, you may need to provide two different types of credentials: Host ...

DAST

Setting up the external database (Standard)

In this section, we'll show you how to set up a database that you want to connect to Burp Suite DAST. This is relevant in the following cases: You want to ...