What is the Burp Suite scanner?
Burp Suite is a handy tool for many things, both security testing and development. Just being able to easily inspect and modify HTTP traffic is quite useful.
Despite all these useful functions, it is undeniable that the number one tool of Burp Suite, its crown jewel and flagship, is its scanner.
The scanner can perform vulnerability scans, where Burp tries to identify various vulnerabilities or weaknesses in the target, and crawling-type scans, where the tool tries to automatically map the paths and interfaces of the website.
Dashboard
Scans are initiated, monitored, and managed from the Burp Dashboard.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/9d43eeab8c6a32d46d9213fc0d0920b3e1083c73-2860x1106.png?w=3840&q=75&fit=clip&auto=format)
The top left pane contains all the current operations you have created. For example, if you create a new scan, it will appear here, where you can manage it. By default, BurpSuite Pro version performs passive mapping and auditing, but you can disable these if you want.
Using a Scanner - Practical Example
Starting the exercise
Now we will start the example lab below and run Burp's audit and mapping scan against it. If you are a member of Hakateemia, you can start the task below and proceed with it.
Opening Application with Burp Browser
Open the application with a browser that is configured to work with BurpSuite software, for example, by opening Burp's built-in browser. Make sure that the application is visible in Burp by going to the Target window.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/1bac5ecf7a4081685aa0ce63ff6db9d4acd96eb4-1576x686.png?w=3840&q=75&fit=clip&auto=format)
Setting the target to scope
Next, set the target In-Scope, meaning include it in the current scope.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/4a17c1dba05e39f1b477c8928331c498ebed0f5e-1032x382.png?w=3840&q=75&fit=clip&auto=format)
Filter the Target window to display only the items contained in the scope by clicking the Filter button located at the top bar. Select Show only in-scope items as the filter. Then select Apply.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/526990c53a1797ebbcd4137e711b52aef4c06f3b-880x572.png?w=1920&q=75&fit=clip&auto=format)
Now we should only see the desired target.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/f17d42f895b75aa86a08f8391d820ae49cce7ee2-650x510.png?w=1920&q=75&fit=clip&auto=format)
Vulnerability and mapping scanning (Crawl and audit)
Next, perform a basic audit and mapping scan on this target. Right-click on the target and select Scan.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/3bcf0e0d6941536b139c1386fc2b55ff6ac1ad5a-548x362.png?w=1200&q=75&fit=clip&auto=format)
This should open a four-part window, where the first part determines the scanning type, as well as other details, such as targets.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/87b3f1e61ae706be9954ce8bbd81c71bec7be79a-1490x788.png?w=3840&q=75&fit=clip&auto=format)
Select Crawl and audit, which means mapping and auditing scan. Then go to the Scan Configuration window.
Scanning Configuration
![](https://cdn.sanity.io/images/3unppnk2/ha-content/60a45ce8e5c130c429c12966a3248ee9fb7eca56-1866x1288.png?w=3840&q=75&fit=clip&auto=format)
Next, we can choose between two different options, which are to choose a preconfigured scanning configuration or create our own. There are also more preconfigured configurations available by going to Use a custom configuration -> Select from library.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/439d1b881b52525a276feefb11fe2cfb73f0670b-1520x1150.png?w=3840&q=75&fit=clip&auto=format)
However, we will choose the Deep-scan on the first page. On the next page, we can specify the authentication-related actions more precisely, meaning providing ready-made credentials or stored login sequences. Nothing needs to be done for this right now.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/ba55fa3f7969989702aedcb0ceeed6a1e1e6ffd8-1220x698.png?w=3840&q=75&fit=clip&auto=format)
Let's take a look at the last window, which is related to resources. The default setting for Burp is often very good and does not require adjustment, but occasionally it may be necessary to either increase or decrease resources as well as scanning speed. However, let's leave this as the default for now.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/d15734e432eef6148df1dfcc612af47398b235be-1200x854.png?w=3840&q=75&fit=clip&auto=format)
Starting and monitoring the scan
Select OK and the scanning source will start automatically. Go back to the Dashboard page. Now we can see that a new scanning operation is in progress and we can open it by pressing the arrow+window button on the right side of the operation.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/468b144458bc45c96474276893c945987ec6835d-1482x546.png?w=3840&q=75&fit=clip&auto=format)
It won't take long for BurpSuite to detect the command injection vulnerability in the task.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/3593c4abc77229ebd0798aa3702ca3a688eb4d7f-2566x1200.png?w=3840&q=75&fit=clip&auto=format)
Stopping the scan
Stop the scan by clicking on the stop sign in the top right corner of the window.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/d7f4c7ad7f457a03b2d8c97df761119d1411b566-458x338.png?w=1080&q=75&fit=clip&auto=format)
Reviewing scan results
Finally, return to the Dashboard page and investigate the vulnerabilities and deficiencies found during the scanning.
![](https://cdn.sanity.io/images/3unppnk2/ha-content/6e21259f1cd03973114173cabdb28f51b8ad4db1-1448x1444.png?w=3840&q=75&fit=clip&auto=format)
![hakatemia pro](/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpro_desktop_en.be4531e0.png&w=3840&q=75)
![hakatemia pro](/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Fpro_mobile_en.937d2b98.png&w=1920&q=75)
Ready to become an ethical hacker?
Start today.
As a member of Hakatemia you get unlimited access to Hakatemia modules, exercises and tools, and you get access to the Hakatemia Discord channel where you can ask for help from both instructors and other Hakatemia members.