Cyber Risks · PortSwigger Research

[MoBP] Alert overload

Summary: PortSwigger's Burp Suite update changes how the scanner's alerts table handles repeated errors: when a new alert matches the previous one, the alerts are aggregated and a counter is shown instead of a separate table entry. The change addresses cases such as an Intruder attack where the target server stops responding, which previously could produce the same error several hundred times per second.

Bottom line: An alerts table filling with thousands of duplicate entries is where a real signal - the target server going down mid-attack - gets buried, so the counter is what lets an operator judge the nature, time and extent of the problem.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related