Automated content discovery with Burp Suite - Port Swigger
Summary: PortSwigger's documentation describes Burp Suite Professional's automated content discovery tool, which guesses hidden directories, files, and endpoints using lists of common names and a naming scheme derived from resources already identified. The tool requires the site map to be populated with content first, and by default adds discovered content to the Target site map, with Burp Intruder offered as a more manual alternative.
What you should know: The tool's core method is guessing names from common lists and patterns already observed, so the hidden endpoints it surfaces are only as good as the naming conventions it can infer - and anything outside those patterns stays invisible to it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026