Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How do i import a Swagger URL which contains a list of APIs directly into Burp ?

Praveen | Last updated: Dec 03, 2020 09:28AM UTC

To perform API Penetration Testing, one needs to directly send a request from a repeater or if the number of APIs are large, one can import the API urls in Postman and then proxy it to Burp and then pen test it. Is there a way to import a Swagger link directly in Burp and get the list of APIs, this will really help when there are a large number of APIs that needs to be pen tested

Uthman, PortSwigger Agent | Last updated: Dec 03, 2020 09:36AM UTC

Hi Praveen, This feature has just recently been released! Please find the instructions below: - https://portswigger.net/burp/documentation/desktop/scanning/api-scanning

Andy | Last updated: Dec 09, 2022 05:40PM UTC

that article does not show how to import a swagger file

Liam, PortSwigger Agent | Last updated: Dec 12, 2022 01:09PM UTC