Restricting access to sites - Port Swigger
Summary: PortSwigger documentation describes using groups in Burp Suite to restrict user access to parts of an organization's infrastructure. Groups have no site restrictions by default, but can be configured to limit access to relevant sites, such as allowing a group to view scan results in a "Production" folder while disallowing the "HR" folder beneath it because its scan results may contain more sensitive information.
What's compelling: Default group settings in Burp Suite place no restrictions on sites, so scan results for sensitive areas like an HR folder stay visible to any group until someone explicitly configures the boundary.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026