Configuring network and firewall settings for a site - Port Swigger
Summary: PortSwigger's documentation for Burp Suite DAST states that adding a new site requires configuring network and firewall settings so scans can reach it, including inbound access from the scanner IPs or scanning machines and outbound access to *.oastify.com on ports 80 and 443. The outbound connection to the public Burp Collaborator server lets Burp Scanner use out-of-band application security testing to check whether an attacker could induce the site to interact with arbitrary external services.
Bottom line: The same outbound path to *.oastify.com on ports 80 and 443 that makes OAST testing work is a standing exception in your firewall, and it has to be opened for Cloud scanner IPs, self-hosted machines, or CI/CD agents alike.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026