Improved detection of stored input
portswigger.net | blog | #burp-suite | #sql-injection | #xss | #scanner | #mobp | #stored-input | #second-order
Summary
Splitting active auditing into distinct phases lets Burp's new scanner detect stored input regardless of scan order, then run second-order checks for issues like stored SQLi and XSS.
- Published
- Collected
--- id: 391 title: "Improved detection of stored input" source_domain: portswigger.net source_url: "https://portswigger.net/blog/improved-detection-of-stored-input" published_at: "2018-08-09T16:29:00Z" tags: ["burp-suite", "sql-injection", "xss", "scanner", "mobp", "stored-input", "second-order"] phying_url: "https://phying.com/item/391" lang: en --- # Improved detection of stored input ## Summary Splitting active auditing into distinct phases lets Burp's new scanner detect stored input regardless of scan order, then run second-order checks for issues like stored SQLi and XSS. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2018-08-09T16:29:00Z - **Original:** https://portswigger.net/blog/improved-detection-of-stored-input - **Phying News:** https://phying.com/item/391