Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do I crawl and run vulnerability scan on a Java application ?

Nabeera | Last updated: Mar 23, 2020 04:39AM UTC

I want to run a vulnerability scan on all the APIs of my Java application. Im sorry if this is a little bit of a conceptual question but I dont know how to work around this with Burp. I understood how Burp suite can crawl a website to get all the Apis of a particular domain but how can I do this for a Java application? My application is basically an interface to get data from a database. So do I have to manually call each and every api, since I dont think crawling will work in this case ?

Michelle, PortSwigger Agent | Last updated: Mar 23, 2020 03:05PM UTC

That's right, you will need to manually map the application, these articles might be useful if you haven't already seen them: https://portswigger.net/support/using-burp-to-enumerate-a-rest-api https://portswigger.net/support/using-burp-to-test-a-rest-api

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.