Connecting Burp Suite DAST to Service Now - Port Swigger
Summary: PortSwigger documented how to connect Burp Suite DAST to ServiceNow so the scanner can create and link tickets, offering two authentication options: username and password, or OAuth client credentials for instances on the Washington DC release or later. Each connection carries its own URL and credentials, so multiple ServiceNow instances can be connected, and the connection check runs on Next, on save, and whenever the URL or credentials change.
What you should know: Removing a connection also deletes its actions and triggers plus the tickets, links and failure records Burp Suite DAST holds for it, even though issue timelines still show tickets were raised - so a cleanup click can quietly sever the audit trail between a finding and its ticket.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026