Cyber Risks · PortSwigger Research

Managing resource pools for scans - Port Swigger

Summary: PortSwigger's Burp Suite documentation describes resource pools as shared quotas of resources that scans and live audit tasks draw from, assigned when a task is created or defaulting to the default pool if none is selected. Tasks can be moved to a different pool mid-attack by editing the task, letting users manage system resource use in real time.

Bottom line: Resource pools apply to scans and live audit tasks but not passive crawl tasks, so a security team running concurrent scans has to decide up front which pool each task draws from - or accept the default - and can only rebalance after the fact by reassigning tasks during an attack.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related