Burp Scanner Documentation
Burp Scanner is a tool for automatically finding security vulnerabilities
in web applications. It is designed to support penetration testers and fits
closely into Burp's user-driven testing
Use the links below for help about Burp Scanner:
Monday, January 16, 2017
This release adds various enhancements and fixes:
- There is a new command-line option to launch Burp with a specified user configuration file.
- A bug that was recently introduced that prevented license activation in headless mode has been fixed.
- The Content Discovery function now correctly handles applications that have wildcard behavior for file extensions (e.g. those that return a specific response for admin.xxx regardless of the file extension). This eliminates the only known false positives reported by the new Content Discovery engine.
See all release notes ›