Cyber Risks · PortSwigger Research

[MoBP] Suite-wide target selection

Summary: PortSwigger added suite-wide target selection to Burp Suite, letting users define hosts, IP ranges, and URL regexes as in or out of scope for the current activity. The scope then governs tool behavior across the suite: display filters, Proxy interception, Spider link-following, automatic vulnerability scans, and Intruder and Repeater redirects.

What you should know: A single scope definition now decides what Burp's Spider follows, what the Proxy intercepts, and what gets scanned automatically - so a loose or stale scope entry can point active scanning and interception at targets that were never meant to be touched.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related