[V13P] Content discovery
Summary: Burp Suite now includes a content discovery function, similar in concept to OWASP's DirBuster, which is started from the context menu on any request or URL within Burp. It discovers content using name guessing, web spidering, and extrapolation from naming conventions observed in the application, with configurable options for target scope, test case generation, file extensions, and the discovery engine's thread count and case sensitivity.
Bottom line: The tool harvests file and directory names and extensions already in use within an application and retries them at other locations, so content an organization assumes is unreachable can be enumerated from naming patterns it left in place.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026