Setting up your external database (Kubernetes) - Port Swigger
Summary: PortSwigger's setup guide for connecting Burp Suite DAST to an external database describes running a setup script that creates a database and two users, burp_enterprise and burp_agent, which must be used with those exact names when migrating from the embedded database. It also states that AWS Aurora databases are not supported, and that connecting to Microsoft SQL Server requires a TLS certificate signed by a public certificate authority unless the JDBC URL is appended with trustServerCertificate=true.
Why it matters: The documented workaround, appending trustServerCertificate=true to the JDBC connection URL, bypasses certificate validation and, in PortSwigger's own words, potentially enables malicious third parties to intercept traffic on the connection to your database.
Read the original at PortSwigger Research ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026