Burp Suite User Forum

Login to post

Testing Rest API

Hridyadas | Last updated: Mar 07, 2023 07:22AM UTC

How API is verified by Burp as there exist a vulnerability or not? On what basis the report is generated? That means how do Burp conclude that there exist a vulnerability or not? Is it by any response from the web applications or anything else?

Ben, PortSwigger Agent | Last updated: Mar 07, 2023 11:07AM UTC

Hi Hridya, Burp will analyse the responses and behaviour of the application under test in order to determine whether it believes vulnerabilities are present.

You need to Log in to post a reply. Or register here, for free.