Set the target scope - Port Swigger
Summary: PortSwigger's tutorial walks through setting the target scope in Burp Suite, which tells the tool exactly which URLs and hosts to test and filters out traffic from third-party sites such as YouTube and Google Analytics. After adding the target site to scope and choosing to exclude out-of-scope traffic, the HTTP history shows only entries from the target website, and further out-of-scope traffic is no longer logged in the site map or proxy history.
Key Takeaway: Without a defined scope, the proxy history and site map fill with third-party requests that bury the traffic an analyst actually needs to review - and the tutorial notes that once scope is set, out-of-scope traffic stops being logged at all, so what falls outside the boundary is no longer captured.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026