CODEWITHSUNDEEP
restsecurityweb-applicationspenetration-testingburp
Bala
Bala

Reputation: 204

How Burp exactly scans a request

I just started working with Burp professional suite 2.0.6 beta. After proxy recording, I just right-click and perform the scan with default configuration.

I want to know exactly what happens in that scan. It covers pen testing, but how?

Does it sends requests to the server and analyze the response, if so, take an example of POST API call. Does Burp replaces the input and sends the call to the server?, but in UI, I can't see any new thing(as POST method) created. Then how does Burp analyzes response?

In my application, if a Form is submitted, the response will be "Form Submitted. Submitted ID:9898" which is JSON output.

Some one please guide or teach me the correct things on how exactly Burp scans a request.

Upvotes: 0

Views: 544

Answers (1)

PortSwigger
PortSwigger

Reputation: 277

You can use the Logger++ extension from the BApp store to monitor activity from Burp Scanner:

Upvotes: 1

Related Questions