Cyber Risks · PortSwigger Research

Burp 2.0: How do I scan individual items?

Summary: PortSwigger's Burp 2.0 changes how Burp Scanner handles individual items: instead of Burp 1.x's single queue of pending scanning work, users can send selected items to an existing scan task or open the scan launcher to create a new one. The scan wizard defaults to "Audit selected items" for scanning just the selection, and running scans appear in Burp's Dashboard for monitoring and control.

What's compelling: The change lets testers run multiple parallel scans with different configurations - a default scan on interesting items, a quick XSS-only scan where input is reflected, or a thorough file path traversal scan on file-handling requests - so the tooling no longer forces every request through one queue.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related