Burp Suite User Forum

Create new post

Testing Rest API

Hridyadas | Last updated: Mar 07, 2023 07:22AM UTC

How API is verified by Burp as there exist a vulnerability or not? On what basis the report is generated? That means how do Burp conclude that there exist a vulnerability or not? Is it by any response from the web applications or anything else?

Ben, PortSwigger Agent | Last updated: Mar 07, 2023 11:07AM UTC

Hi Hridya, Burp will analyse the responses and behaviour of the application under test in order to determine whether it believes vulnerabilities are present.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.