Lab: Discovering vulnerabilities quickly with targeted scanning
Summary: PortSwigger's lab presents a server with a vulnerability that allows arbitrary file reads, and the task is to retrieve the contents of /etc/passwd within 10 minutes. Because of the tight time limit, the lab recommends using Burp Scanner on a specific request rather than scanning the entire site, then exploiting the attack vector it identifies.
What you should know: The exercise is built around a 10-minute window: a full-site scan may not leave enough time, so the intended approach is to pick likely-vulnerable endpoints by intuition and run a targeted scan on one request. It shows how much of finding a path to /etc/passwd depends on narrowing the scan before the clock runs out.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026