Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Content Discovery

Winn, | Last updated: Jul 20, 2020 06:32PM UTC

Hey all, I'm fairly new to Burp, still getting a feel for it. I was curious if it is best practice to run the "Content Discovery" tool before running an Audit scan? I normally just crawl the target URL before running an Audit but I've noticed that the Content Discovery is building a much more detailed site map than a normal crawl. How important is this? Could I be missing findings in the Audit scan by not running content discovery prior?

Michelle, PortSwigger Agent | Last updated: Jul 21, 2020 09:23AM UTC

The content discovery tool will help you find content that is not linked from visible content that you can access by browsing, you can read a bit more about it here: https://portswigger.net/burp/documentation/desktop/functions/content-discovery https://portswigger.net/blog/v13p-content-discovery If you need further assistance, please let us know.

Winn, | Last updated: Jul 27, 2020 03:37PM UTC

Thanks Michelle - Do you think the discovery tool should be ran prior to running an audit scan?

Michelle, PortSwigger Agent | Last updated: Jul 28, 2020 01:26PM UTC