PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Browser powered scanning 2.0

portswigger.net | blog | #engineering | #burp-scanner | #chrome-devtools-protocol | #browser-scanning | #sso
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Burp Scanner's browser-powered scanning 2.0 began as a small task to support logins opening new tabs, but ended as a full rewrite of the Chrome DevTools Protocol integration layer.
Published
Collected

Related coverage

blog · portswigger.net
Keep it simple, Scanner
A Burp Scanner engineer reflects on simplifying the crawler: the new crawl paths view exposes the internal location graph, so legacy complexity like merge optimization is being pruned away.
blog · portswigger.net
Performance Improvements to table sorting and Repeater
PortSwigger engineer Daniel Allen details the fixes behind Burp Suite's table sorting and Repeater performance: in-memory data snapshots, background-thread sorting, and improved UI feedback.
blog · portswigger.net
Burp Suite roadmap update: January 2023
The January 2023 Burp Suite roadmap highlights popup-aware recorded logins, revamped browser-powered scanning, and upcoming declarative scan checks plus improved React form handling in Burp Scanner.
blog · portswigger.net
Gin and Juice Shop: put your scanner to the test
PortSwigger launched Gin and Juice Shop, a deliberately vulnerable web app with realistic defenses like single-use CSRF tokens, built for benchmarking scanners such as Burp Scanner.
blog · portswigger.net
Burp Scanner can now crawl static sites between 6x - 9x faster
Burp Suite Professional 2022.2.3 makes Burp Scanner's crawler 6x-9x faster on static or stateless sites. Select the Fastest crawl strategy to benefit from this automated recon speed-up.
blog · portswigger.net
Passive-aggressive scan checks
An April Fools post from PortSwigger announcing that Burp Scanner's passive checks would become 'passive-aggressive', swapping standard advisories for sarcastic remarks urging users to fix issues.
Back