Cyber Risks · PortSwigger Research

Burp Bounty, Scan Check Builder

Summary: Burp Bounty is a third-party Burp Suite extension, version 4.0a, that lets users improve the active and passive scanner through personalized rules entered in a graphical interface. It builds custom issue profiles by searching for patterns and refining the payload sent, and was last updated on 04 February 2022.

Bottom line: This is a third-party extension that PortSwigger explicitly makes no warranty about for quality or usefulness, so any custom scanning rules your team builds on it carry that same lack of vendor backing.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related