Cyber Risks · PortSwigger Research

Bulk uploading APIs - Port Swigger

Summary: PortSwigger's Burp Suite DAST documentation describes a bulk upload feature that creates a separate site for each API definition file or URL in a single operation, accepting a mix of Postman Collections, OpenAPI definitions, SOAP WSDL files, and Burp XML files. The workflow applies shared network settings, authentication credentials, and scan configuration across all imported sites, with an option to either review API definition changes manually or apply new versions automatically.

Key Takeaway: Bulk import applies one set of authentication credentials and scan configuration to every site in the batch, so a single misconfiguration propagates across the entire API estate rather than one target.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related