Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Automatically starting a preconfigured scan

PMwxVLDHhy6oiP | Last updated: Mar 12, 2021 09:39AM UTC

For extension development purposes, I'd like to easily and automatically start a 'crawl and audit' preconfigured scan with one mouse click. Under 'preconfigured' I include all the options in the scan launcher, including the scan type, scan configuration and resource pool. I have three specific questions: - Is it possible to launch automatic scans in this manner? - Is it possible to change the default configuration of the 'Do Active Scan' option? - Is it possible to start a 'crawl and audit' scan via the 'Do Active Scan' option or similar? I use Burp Pro v2021.2.1.

Hannah, PortSwigger Agent | Last updated: Mar 12, 2021 12:40PM UTC

Hi The "Do active scan" option will not include crawling as part of its scan, it will just perform an audit on the specified request. You cannot change the default configuration for the "Do active scan" option. You could start a scan, adjust the configuration and then add future requests to the existing configured scan task? Alternatively, you could trigger a full crawl and audit in Burp using the REST API. The settings for this can be found under "User options > Misc > REST API". Once you have the REST API running, you can access the URL that it is running on. It has an interactive UI to allow you to easily generate the command required for your scan.

PMwxVLDHhy6oiP | Last updated: Mar 12, 2021 01:15PM UTC

The REST API fulfills my needs, thank you!

Hannah, PortSwigger Agent | Last updated: Mar 12, 2021 01:27PM UTC