Recorded login sequences - Port Swigger
Summary: PortSwigger's Burp Scanner now lets you import a recorded login sequence - a set of instructions telling the scanner how to log in - instead of supplying basic user credentials, which lets it handle complex authentication mechanisms. When running a sequence, the scanner can temporarily follow out-of-scope links needed to complete the login, though those locations are not crawled or audited, and a sequence recorded once can be reused across scans in a large application portfolio.
Bottom line: Reusable login sequences are what make automated scanning across a large application portfolio practical, but the scanner will follow out-of-scope links to complete a login - so the boundary of what your scan touches is set by the recorded sequence, not by the target scope alone.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026