Burp Suite DAST

Burp Suite DAST is a web vulnerability scanner that uses the same engine as Burp Suite Professional.

Table of Contents

• Architecture
• Configuration
• Reference

Architecture

See Architecture overview (PortSwigger).

Ports

By default, Burp Suite DAST uses port 8080 (HTTP) or 8443 (HTTPS). This can be changed during the installation process.

Configuration

Scanning machine configuration files

C:\Program Files\burpsuiteenterprise_scanningmachine\enterpriseAgent\<version>\agent.config

Data

C:/ProgramData/BurpSuiteEnterpriseEditionScanningMachine

Reference

• Burp Suite DAST documentation (PortSwigger)
• GraphQL API documentation (PortSwigger)