Cyber Risks · PortSwigger Research

Getting started with Burp Logger - Port Swigger

Summary: PortSwigger's tutorial walks through using the Burp Logger tab, which displays all HTTP traffic sent between Burp's tools and target websites, including requests sent automatically by tools like Burp Scanner. It notes that Burp Scanner requests do not appear in the HTTP history because they are not trafficked through a proxied browser, so only the Logger tab shows them.

What's compelling: The Logger tab is the only place Burp Scanner's automated requests are visible, and once the log is cleared with the trash icon it cannot be retrieved - so an audit trail of what the scanner sent can be lost if no one is watching that tab.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related