Performing both passive and active vulnerability scanning using the Burp Suite scanner:
- By default, Burp Suite will passively scan all in-scope web content that is accessed via the browser when connected to the proxy. The term passive scanning is used to refer to Burp Suite passively observing requests and responses to and from the server and examining that content for any evidence of vulnerabilities.
- Passive scanning does not involve the injection of any probes or other attempts to confirm suspected vulnerabilities. Have a look at the following screenshot:
- Active scanning can be performed by right-clicking on any object ...
