Configuring your web server (Kubernetes) - Port Swigger
Summary: PortSwigger's setup guide for Burp Suite DAST says the web server URL must be configured after installation, since it is used to generate links in emails such as password reset messages. The default port is 8443, the server ships with a temporary self-signed certificate over HTTPS, and the guide instructs users to upload their own TLS certificate as a Kubernetes secret and set it in values.yaml.
Why it matters: The default self-signed certificate is a placeholder, so until an organization uploads its own TLS certificate and passphrase as a Kubernetes secret, the scanner's own web interface is running on credentials nobody issued or tracks.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026