Configuring your network and firewall settings (Standard) - Port Swigger
Summary: PortSwigger's guidance for Burp Suite DAST states that firewalls may need configuring so the scanner's components can communicate with each other and the public web, over both IPv4 and IPv6. It specifies that the machine and the target application must both reach *.burpcollaborator.net and *.oastify.com on ports 80 and 443 for out-of-band vulnerability detection, and recommends a dedicated DMZ network for the scanning machines.
What's compelling: The same document warns that scanning machines should only reach systems you intend to scan, because otherwise unintended users may gain access to internal functionality - a real exposure for any team that opens outbound paths for a scanner without scoping what sits behind them.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026