Cyber Risks · PortSwigger Research

Enterprise Edition Team City plugin 2021.3

Summary: PortSwigger released version 2021.3 of its native TeamCity plugin for Burp Suite Enterprise Edition, adding a "site-driven scan" integration option while keeping the legacy "Burp scan" option unchanged. The new option fetches sites automatically from Burp Suite Enterprise Edition through its GraphQL API, letting users manually select the exact site for a scan instead of relying on automated site-matching rules, and requires Enterprise Edition 2021.3 or higher.

Key Takeaway: The plugin can fail a build based on scan results, so a scan tied to the wrong site through automated matching can block a release for the wrong reason or leave the real target unscanned - which is why the release pushes manual site selection for most new integrations.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related