Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[MoBP] Passive vulnerability scanning

portswigger.net | vulnerability | #burp-suite | #information-disclosure | #vulnerability-scanning | #portswigger | #passive-scanning | #cookies

Summary

Burp's passive checks flag issues without sending new requests: clear-text passwords, insecure cookie flags, directory listings, information leakage and more - ideal for fragile production systems.
Published
Collected

original ↗

Related coverage

  1. How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  2. Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years (portswigger.net)
  3. From capable AI models to trusted security testing (portswigger.net)
  4. Introducing Burp AT: agentic AI, built on two decades of Burp Suite (portswigger.net)
  5. Practical Web Cache Poisoning (portswigger.net)
  6. Finding that one weird endpoint, with Bambdas (portswigger.net)

back