Burp Suite User Forum

Create new post

Database scanning

Karthik | Last updated: Aug 12, 2015 01:06PM UTC

Is Burpsuite capable of performing vulnerability scans against databases ? I have seen and there is no option, but just wanted to confirm with the experts. Also, do we have a security standard for databases as we have OWASP/SANS etc for web applications ? Could some one suggest a tool/software that could perform vulnerability scanning against databases ?

PortSwigger Agent | Last updated: Aug 12, 2015 01:17PM UTC

Burp cannot scan databases directly, and only interacts with databases through scans via the application layer.

Burp User | Last updated: Aug 17, 2015 05:04AM UTC

Thanks for the response.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.