Cyber Risks · PortSwigger Research

Enterprise Edition: configuring web sites

Summary: PortSwigger's documentation describes how Burp Suite Enterprise Edition lets an organization configure all of its web sites so they are available for scheduled scanning. Sites can be organized into a folder-based tree that mirrors the organization or infrastructure, with user access restricted to parts of that tree, and each site configured with its access URLs, excluded sub-URLs, application login credentials, and default scan configurations.

Why it matters: Scheduled scanning only covers what someone has entered into this tree, so any site left unconfigured - or any sub-URL excluded - is a gap that no scan will report on.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related