---
id: 338
title: "API Scanning with Burp Suite"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/api-scanning-with-burp-suite"
published_at: "2021-03-11 16:08"
tags: ["burp-suite", "attack-surface", "rest-api", "openapi", "burp-scanner", "api-scanning"]
phying_url: "https://phying.com/item/338"
lang: en
---

# API Scanning with Burp Suite

## Summary

Burp Scanner's crawler was adapted for APIs: instead of following HTML links, it parses OpenAPI v3 JSON definitions to enumerate endpoints, exposing attack surface security teams often miss.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2021-03-11 16:08
- **Original:** https://portswigger.net/blog/api-scanning-with-burp-suite
- **Phying News:** https://phying.com/item/338