Skip to content
API Scanning with Burp Suite
portswigger.net | blog | #burp-suite | #attack-surface | #rest-api | #openapi | #burp-scanner | #api-scanning
Summary
Burp Scanner's crawler was adapted for APIs: instead of following HTML links, it parses OpenAPI v3 JSON definitions to enumerate endpoints, exposing attack surface security teams often miss.
- Published
- Collected