Cyber Risks · PortSwigger Research

Deploying Burp Suite DAST to Kubernetes - Port Swigger

Summary: PortSwigger published a four-step procedure for deploying Burp Suite DAST to Kubernetes: set up the cluster, install the application, create the admin user, and activate the license. The page notes that the standard Burp Suite DAST installer can also be run on cloud-hosted machines as an alternative to installing directly to Kubernetes.

Key Takeaway: Running the scanner inside Kubernetes puts an automated attack tool on the same infrastructure as your workloads, so the cluster setup and admin account created in steps one and three become part of the security team's own attack surface.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related