Skip to content

Running a BCheck only enabled scan

PortSwiggerWiener edited this page Apr 9, 2024 · 1 revision

Running a BCheck only audit

There is a BCheck only built-in audit configuration which can be used to configure an audit where only the currently enabled BChecks will be run.

To perform a BCheck only audit:

  1. Ensure that the relevant BChecks have been loaded and are enabled. See here for details.
  2. Open the scan launcher by clicking New Scan > Webapp scan on the Dashboard to open the scan launcher.
  3. Configure Scan Details as appropriate.
  4. Select Scan Configuration.
  5. Select Use a custom configuration.
  6. Click the Select from library button.
  7. Double click the Audit checks - BChecks only entry from the list
  8. Optionally configure any other scan details, e.g. resource pool settings or application login.
  9. Click the OK button to close the launcher and initiate the scan.

Further details on the launching a scan be found here.

Note that if you are developing a BCheck, then it is recommended to use the BSCode editor as this will provide a shorter feedback loop.

Clone this wiki locally