PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Burp Scanner can now crawl static sites between 6x - 9x faster

portswigger.net | blog | #reconnaissance | #burp-suite-professional | #performance | #burp-scanner | #crawler | #static-sites
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Burp Suite Professional 2022.2.3 makes Burp Scanner's crawler 6x-9x faster on static or stateless sites. Select the Fastest crawl strategy to benefit from this automated recon speed-up.
Published
Collected

Related coverage

blog · portswigger.net
Keep it simple, Scanner
A Burp Scanner engineer reflects on simplifying the crawler: the new crawl paths view exposes the internal location graph, so legacy complexity like merge optimization is being pruned away.
blog · portswigger.net
Browser powered scanning in Burp Suite
A deep dive into why Burp Suite's scanner is powered by an integrated Chromium browser: modern AJAX-heavy apps build the DOM client-side, so reliable crawling now requires real browser rendering.
blog · portswigger.net
Web application cartography: mapping out Burp Suite’s crawler
A look at Burp Scanner's crawler evolution since 2008: the Burp 2 rewrite maps applications automatically and maintains session context per request, freeing testers from manual session handling.
blog · portswigger.net
Burp Suite Professional - evolving the future of web security testing
A review of 2020 additions to Burp Suite Professional, including browser-powered scanning, recorded login sequences, API vulnerability scanning, HTTP/2 support, and cache poisoning checks.
blog · portswigger.net
What's new in Burp Suite Professional: A year of innovation
A roundup of a year of Burp Suite Professional updates: major performance improvements, expanded Bambdas scripting capabilities, Burp AI launch, and workflow enhancements across the toolkit.
blog · portswigger.net
Welcome to the next generation of Burp Suite: elevate your testing with Burp AI
Burp Suite Professional 2025.2 introduces Burp AI with five features: Explore Issue, Explainer, AI-generated recorded logins, access control false positive reduction and AI-powered extensibility.
Back