Live scanning
Summary: PortSwigger is introducing live scanning tasks in its new Burp Scanner, letting testers perform live scanning of traffic from Burp tools beyond the Proxy, with selectable tools to monitor, URL scope, and item deduplication. The release also adds finer-grained control over what gets added to the site map, so testers can limit additions to links on the requested domain or any in-scope domain, and can create as many distinct tasks as they like with different scopes and configurations.
Bottom line: Burp currently adds every link found in responses to the site map, which on modern sites means browsing a single page can pollute it with dozens of uninteresting domains - the new controls let testers decide exactly what enters that map.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026