Configuring your web server (Standard) - Port Swigger
Summary: PortSwigger's setup guidance for Burp Suite DAST says administrators must set the web server URL on first admin login, in the format https://your-web-server-IP:8443 with 8443 as the default port, because the URL is used to generate emailed links such as password reset messages. HTTPS requires uploading a TLS certificate, which must be a .p12 file since .pfx is not supported, and Kubernetes instances cannot have web server ports changed because the external port is set in the ingress configuration.
Key Takeaway: Kubernetes and external-database instances ship with a temporary self-signed certificate by default, so until an administrator uploads a proper .p12 certificate, the scanner's own login and password-reset links run on a certificate the documentation tells you to replace.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026