[MoBP] The all new Burp Spider
Summary: PortSwigger has completely rewritten Burp's Spider from scratch, replacing what the post calls the weakest core Burp tool, with its old buggy code and usability obstacles, with improved content parsing and new features. Spidering is now driven entirely through the target site map and other tools, so users map an application manually in the browser first and then select nodes and choose "spider from here" to map the remaining content.
Why it matters: The tool a tester reaches for to enumerate an application's unrequested, grey-listed content has been rebuilt, so any team whose scanning workflow depends on the old Spider's behavior should expect the crawl to follow the site map rather than run on its own.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026