Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Browser powered scanning in Burp Suite

portswigger.net | blog | #burp-suite | #javascript | #burp-scanner | #crawler | #architecture | #chromium | #browser-based-scanning

Summary

A deep dive into why Burp Suite's scanner is powered by an integrated Chromium browser: modern AJAX-heavy apps build the DOM client-side, so reliable crawling now requires real browser rendering.
Published
Collected

original ↗

Related coverage

  1. Web application cartography: mapping out Burp Suite’s crawler (portswigger.net)
  2. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  3. Keep it simple, Scanner (portswigger.net)
  4. Burp Scanner can now crawl static sites between 6x - 9x faster (portswigger.net)
  5. Recorded logins in Burp Scanner (portswigger.net)
  6. Bypassing CSP using polyglot JPEGs (portswigger.net)

back