Cyber Risks · PortSwigger Research

Migrating from Linux to Cloud - Port Swigger

Summary: PortSwigger published a guide for using its migration tool to move data from a self-hosted Linux instance of Burp Suite DAST to its cloud, transferring sites and folders, custom scan configurations, extensions, BChecks, groups and roles (but not users), scheduled recurring scans, and tags. The export runs as a sudo command from the installation folder and produces a ZIP file, which is imported through the GraphQL API using an API user and key, and the import only works on clean cloud instances.

Why it matters: The import fails on cloud instances that already hold data, so a team that starts configuring the new instance before migrating can hit errors from duplicate scan configurations or extensions. One-off scans are not exported, and imported custom scan configurations are attributed to the API user who runs the import.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related