PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Unlock enhanced API scanning with Burp Suite

portswigger.net | blog | #burp-suite | #api-security | #dast | #openapi | #scanning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Burp Suite's enhanced API scanning removes the need to host definition files, detects APIs left exposed to attackers, supports more OpenAPI endpoints, and can scan APIs requiring authentication.
Published
Collected

Related coverage

blog · portswigger.net
Get started with DevSecOps: insights from Aleksandr Krasnov - Product Security Engineer
Dropbox product security engineer Aleksandr Krasnov shares practical advice on getting started with DevSecOps, from scanning your web estate for blindspots to the benefits of dynamic (DAST) scanning.
blog · portswigger.net
Burp's new REST API
Burp gains a new self-documenting REST API for integration with other tools. The initial release supports launching vulnerability scans and obtaining results, with an OpenAPI specification available.
blog · xbow.com
XBOW AI-Driven Pentesting vs. DAST
Compares XBOW's autonomous pentesting with traditional DAST on speed, accuracy and usability, arguing context-aware testing beats crawling and blind payload-list spraying.
blog · portswigger.net
Heading to San Francisco? Meet PortSwigger at OWASP Global AppSec USA 2026
Join us at booth G14 on 5–6 November at the Hyatt Regency San Francisco. We’re a Gold sponsor, with live Burp AT demos, conversations about your AppSec programme, and something new to share. OWASP is
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · portswigger.net
How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years
A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.
Back