Using Burp Scanner during manual testing
Summary: PortSwigger's guidance describes using Burp Scanner alongside manual testing: right-clicking a request and selecting Do active scan audits only that request with the default configuration, and highlighting an insertion point and selecting Scan selected insertion point limits testing to specific inputs. The Scan manual insertion point extension lets testers highlight any character sequence, such as a custom header value or a substring like 'carlos' in a hyphen-separated parameter, and scan it in seconds.
Why it matters: The article notes that Burp Scanner treats a value like an ID-and-username pair as a single value, placing payloads only at the end or replacing it entirely - so a tester who skips targeted insertion points can leave the interesting part of a parameter untested.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026