The simplest way to detect vulnerabilities such as SQL injections is by using Burp Suite's scanner:
- To launch the scan, open Burp Suite, go to the main Dashboard, and click on New scan:
There is an option that we did not explore previously, which is used to control the scope during a scan. Imagine that your scope is not all of the DHL website—it is just www.dhl.com, but there are other applications, such as mydhl.dhl.com and intranet.dhl.com, and so on.
- To avoid that, Burp Suite can scan these other applications; click on Detailed scope configuration. Here we will see two tabs named Include prefix options and Exclude prefix ...
