[MoBP] Live scanning as you browse
Summary: PortSwigger describes a Burp Scanner mode that automatically sends each unique request made through Burp Proxy for active or passive scanning while the tester browses, with separate settings and scopes for each scan type. The post notes that live passive scanning of every request shows the scanner tab flashing with identified issues without sending a single malicious request.
What you should know: The tool flags issues passively as a tester browses any site, so findings surface without any deliberate scan being launched - a reminder that what looks like ordinary browsing can still generate a steady stream of vulnerability signals someone has to triage.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026