Cyber Risks · PortSwigger Research

Preset scan modes - Port Swigger

Summary: PortSwigger documents four preset scan modes in Burp Scanner, described as predefined collections of scan settings that adjust how a scan balances speed and coverage. In Burp Suite DAST, a preset scan mode can be selected for folders, subfolders, and sites, and when set at multiple levels only the lowest-level preset runs; DAST presets cannot be customized.

What's compelling: In DAST, a preset chosen on a subfolder silently overrides the one set higher up, so a scan's speed and coverage may not match what the team intended for that site.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related