Cyber Risks · PortSwigger Research

Using Burp with Selenium - Port Swigger

Summary: PortSwigger's article describes how to route Selenium browser-automation test traffic through Burp Suite, either by configuring the Selenium driver to proxy through Burp or by setting the proxy at the OS level. With interception turned off, Burp captures the test traffic, passively reports issues it observes during the run, and lets you select the Proxy history afterward to launch an active scan.

What's compelling: Automated Selenium tests generate real request traffic that most teams never inspect for vulnerabilities; proxying that traffic through Burp turns an existing test suite into a passive and active scanning surface without writing new tooling.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related