Efficient Discovery: A Pentester Case Study | Port Swigger
Summary: A PortSwigger case study presents a pentester describing how Burp Suite is used during discovery: walking the application in the built-in browser to populate the site map, starting a background scan almost immediately, and sending interesting endpoints to Param Miner or targeted scans. The tester names Burp Scanner as their top feature for avoiding manual fuzzing, and uses Repeater to reduce a request to its simplest form before building a proof of concept in the reporting tool.
What you should know: The tester's workflow depends on the scanner running in the background while manual recon continues, and on it reporting which parameter is affected and the supporting evidence rather than requiring that data to be entered by hand.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026