---
id: 497
title: "[MoBP] Passive vulnerability scanning"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/mobp-passive-vulnerability-scanning"
published_at: "2008-11-19T08:03:00Z"
tags: ["burp-suite", "information-disclosure", "vulnerability-scanning", "portswigger", "passive-scanning", "cookies"]
phying_url: "https://phying.com/item/497"
lang: en
---

# [MoBP] Passive vulnerability scanning

## Summary

Burp's passive checks flag issues without sending new requests: clear-text passwords, insecure cookie flags, directory listings, information leakage and more - ideal for fragile production systems.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2008-11-19T08:03:00Z
- **Original:** https://portswigger.net/blog/mobp-passive-vulnerability-scanning
- **Phying News:** https://phying.com/item/497