Scanning specific HTTP messages - Port Swigger
Summary: PortSwigger's Burp Scanner can run focused scans on specific HTTP messages selected from tools that display HTTP traffic, such as the Site map and HTTP history tabs. Users right-click selected entries and choose either a passive scan, which analyzes the base request and response without sending new requests, or an active scan, which sends its own requests to probe for vulnerabilities.
What's compelling: The distinction between passive and active scanning matters operationally: an active scan sends its own requests to the target, so scoping a scan to selected messages is what keeps probing confined to the requests you chose.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026