Warning: I gave up on DAST scanners until a Burp trick at a Chicago meetup changed my mind

Finley Hernandez · 2026-10-07T17:05:03.70939+00:00

I used to think automated scanners just spam you with junk findings, so I ignored them for 2 years and tested everything by hand. Last month at a small meetup in Chicago, a guy showed me how to load my saved Burp session into the scanner so it only tests the endpoints I already mapped. That cut my false positives way down, from about 40 alerts to 3 real ones. Has anyone else tried feeding a proxy history into their DAST tool, or am I late to this?

SMM Buzz

Loading…

Warning: I gave up on DAST scanners until a Burp trick at a Chicago meetup changed my mind | Appsec Tools - SMM Buzz