[MoBP] Bespoke vulnerability advisories
Summary: PortSwigger describes how Burp Scanner generates a fully customised advisory for each issue it finds, containing the relevant detail about the vulnerability and how to reproduce it, in a format detailed enough to copy directly into a penetration testing report. The advisory adds custom remediation advice based on the observed features of the vulnerability, plus a standard description and general defences, and Burp shows the requests and responses used to identify the issue with relevant portions highlighted.
Why it matters: The tooling now writes the finding, the reproduction steps and the remediation advice in one pass, which shifts the reviewer's job from assembling the report to verifying the proof-of-concept attack Burp generated.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026