Scanning with extensions in Burp Suite DAST - Port Swigger
Summary: PortSwigger documented how Burp Suite DAST users apply administrator-added extensions to individual sites, folders, or new sites through the Scan settings Extensions tab, with folder-level extensions inherited by subfolders and sites inside them. The documentation notes that using extensions can increase the duration of scans, and that inherited extensions are flagged by an information banner and managed from the parent folder.
Key Takeaway: Folder-level inheritance means one extension applied at the top of a site hierarchy silently runs on every scan beneath it, so a single configuration choice can lengthen scan times across an entire folder without anyone revisiting it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026