[MoBP] Hacker-oriented web scanning

Summary: PortSwigger announced a new Burp Scanner, a web application vulnerability scanner available only to users with a paid subscription to the commercial version of Burp. The tool is built for semi-manual penetration testing: a request can be sent from Proxy, Repeater, or Intruder to the scanner for active scanning, with results shown immediately and a typical request with a dozen parameters scanned in a couple of minutes.
What's compelling: The scanner is aimed at per-request scanning that feeds directly into a tester's existing workflow, which PortSwigger positions against monolithic automated scans that take a long time with little assurance they worked - a tradeoff security teams weighing scanner coverage against scan reliability should consider.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026