10
A senior dev at work said my Burp Suite scans were 'noise, not intelligence'
He showed me how to tune the scope and session handling rules so I wasn't drowning in false positives. Has anyone else had to totally relearn how they configure their scanners after getting called out like that?
2 comments
Log in to join the discussion
Log In2 Comments
alexc931mo ago
Glad I'm not alone in getting that reality check, it stings but the results speak for themselves.
7
pat_coleman1mo ago
Drowning in false positives means you're not actually looking for real problems, you're just spraying and praying. Getting called out like that is a favor if it made you stop wasting everyone's time.
1