Cyber Risks · PortSwigger Research

Reviewing unrequested items - Port Swigger

Summary: PortSwigger's documentation describes how Burp Suite users can review unrequested items in the site map, which are items the live passive crawl detected but the user has not yet requested. The site map displays these items in gray, and users can group them by selecting the whole application in the tree view and clicking the Time requested column header.

What's compelling: Unrequested items are content the crawl found but nobody has looked at yet, so they sit outside whatever review has already been done - a gap a security leader should account for before treating a crawl as complete coverage.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related