Performing common tasks with the GraphQL API - Port Swigger
Summary: PortSwigger's documentation describes how to run common Burp Suite DAST operations through its GraphQL API, including queries for scan status, per-scan issue counts by severity, scan configurations, and the site tree, plus mutations to create sites, schedule scans in bulk, and move sites between folders. The examples show scan 21029 returning five high-severity, one low-severity, and six information-only issues, and a site_tree query returning four folders and four sites.
Key Takeaway: The same API that lets a team schedule scans across multiple sites and folders in one mutation also lets a caller create sites and move them anywhere in the tree, so the credential behind it carries real change authority over your scanning estate.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026