BurpSuite Spidering How does new content get discovered

Question

Hi. I am new to hacking and I am practicing Web Spidering using BurpSuite Community edition. I was just curious to know how BurpSuite discovers content? Is there a logic for it or it just bruteforces all the links?

Answer 1

Actually, it does both. First, it bruteforces all the links from the index page recursively. This will create a map of discovered content. After this, burpsuite uses different techniques to discover new content such as:

• Brute force using built-in lists of common file and directory names
• Dynamic generation of wordlists based on resource names observed within the target application
• Testing for alternative file extensions on identified resources