Cyber Risks · PortSwigger Research

Dradis Framework

Summary: PortSwigger's BApp Store lists a Burp extension, version 0.0.4 from the Dradis Core team, that connects Burp Scanner to the Dradis Framework, a collaboration and reporting tool that combines output from 20 different scanners with manual findings and screenshots. After loading the extension, users right-click issues identified by Burp's Scanner and send them to Dradis through its JSON HTTP API, with Dradis Community and Professional editions both supported.

Key Takeaway: The connector is third-party code under GPLv2, and PortSwigger states it makes no warranty about its quality or usefulness, so the tool that consolidates findings from 20 scanners into your reports carries no vendor assurance.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related