Adding a single API - Port Swigger
Summary: PortSwigger's documentation describes how Burp Suite DAST lets users add a single API as a site by uploading a definition file, providing a URL, or importing captured traffic as a Burp XML or HAR file. Uploaded definition files are used for every scan until replaced, URL-based definitions always use the latest version, GraphQL definition files cannot be uploaded, and scanning Burp XML files requires Burp Suite DAST 2026.10.3 or later.
Why it matters: The tool sends each recorded request with its recorded credentials and does not detect authentication schemes from recorded headers, so imported traffic carries whatever secrets were captured in it. It also cannot replay requests in their recorded order or edit recorded values before scanning, which limits what a scan of captured traffic can actually prove.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026