The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Start an active scan with insertion points via the REST API

Nishant | Last updated: Mar 11, 2021 08:01AM UTC

Hi, Is there a way to start an active scan with payload offsets (like we do using the Intruder's scan defined insertion points GUI context menu) via the REST API i.e. submitting a HTTP request with insertion points via the REST API instead of a URL? This would help us automate the regression of known vulnerabilities (reported via other channels like manual pentesting, red-team or bug-bounty etc.) instead of having to crawl and/or scan all parameters with all vulnerabilities to reduce scan time and accuracy.

Hannah, PortSwigger Agent | Last updated: Mar 12, 2021 11:22AM UTC