Complementing your manual testing with Burp Scanner - Port Swigger
Summary: PortSwigger's documentation describes how Burp Scanner can be used alongside manual testing, letting testers right-click a specific request in Proxy > HTTP history and run a targeted scan that often takes only seconds rather than scanning the whole application. It also covers manually defining insertion points to limit the audit phase to chosen inputs, including custom header values Scanner would normally ignore, and storing requests and responses in Burp Organizer for later review.
What's compelling: A targeted scan of a single request finishes in seconds, so the constraint on testing coverage is no longer scan time but whether a tester thinks to point the scanner at the right request.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026