Microsoft Case Study | Port Swigger
Summary: A PortSwigger case study describes how Microsoft penetration testers use Burp Suite, with one tester saying the tool is "not up for consideration" as an alternative. The tester describes starting with content discovery, running a full crawl and audit at the deepest setting, and using Burp Collaborator, mostly on the public server, to test external service interactions and SSRF issues.
Why it matters: The tester notes Microsoft has a million different domains and that a single application under test may use 20 different domains, which is the scale at which traffic triage takes days before testing even begins.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026