[MoBP] The new target site map
Summary: PortSwigger's Burp Suite introduces a new "target" tab that consolidates all information gathered about an application being tested, including resources directly requested and items inferred by analyzing responses. The site map presents hosts and directories in a tree view, shows item details in a sortable table, and lets testers launch actions like spidering, scanning, or sending requests to Intruder and Repeater from context menus.
Key Takeaway: The post notes that browsing a single page, such as the BBC news front page, lets Burp infer a large amount of information about the target - a reminder of how much attack surface is exposed from one request and how much of it defenders never see mapped.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026