The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

BurpSuite Enterprise - Real time retrieval of credentials from external source (Enterprise Credential Vault)

ADIA | Last updated: Jul 27, 2020 12:32PM UTC

We would like to see a feature added to the Enterprise product that would allow for the real-time retrieval of credentials (associated with a scan configuration) from an external source. Enterprise security policies often require that privileged or non-human credentials be stored and managed by an enterprise PAM solution. To ensure that Burp scans have the latest, correct set of credentials to access a particular application or resource, we'd like to have the ability to have the agent retrieve them from an arbitrary external source via HTTP request to a REST endpoint at the time of execution. This could include a local caching mechanism, but does not have to.

Ben, PortSwigger Agent | Last updated: Jul 28, 2020 02:33PM UTC