3 ways custom scan checks turn practitioner knowledge into scalable automation
Summary: PortSwigger Research describes custom scan checks in Burp Suite as a way to encode senior pentesters' testing logic into repeatable automated tests, citing the React2Shell disclosure where it released a check immediately and a major MSSP used it in live emergency engagements before rolling it out at scale in Burp Suite DAST. The checks also cover secrets and sensitive data in HTTP responses, missing CSP headers, CORS misconfigurations, and environment-specific expectations such as X-Tenant-ID header handling in microservices, across the 18,000+ security teams PortSwigger says use Burp Suite.
Bottom line: PortSwigger notes it is only a matter of hours before a disclosed critical CVE is actively exploited, and manual probing of thousands of apps and APIs leaves the estate exposed in that window - the MSSP example shows the difference between finding a vulnerability once and testing for it everywhere.
Read the original at PortSwigger Research ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026