Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp Suite Enterprise edition - API endpoint scan

Banupriya | Last updated: Feb 10, 2021 10:11AM UTC

Could you please help me with performing API endpoint scan using Burp Suite Enterprise edition?

Uthman, PortSwigger Agent | Last updated: Feb 10, 2021 10:36AM UTC

Hi Banupriya, What type of API endpoint are you attempting to scan? Have you taken a look at our API scanning functionality below? - https://portswigger.net/burp/documentation/desktop/scanning/api-scanning

Banupriya | Last updated: Feb 23, 2021 04:40AM UTC

Hi Uthman, I'm trying to scan Rest API with Burp Enterprise from Jenkin pipeline. Build job is success but scan in not happening automatically in Burp. Also I could not see any option as token, header, client ID, client secret in Burp authentication option. Here is the error: {"error":"Unauthorized"}POST [Pipeline] } [Pipeline] // stage [Pipeline] } [Pipeline] // node [Pipeline] End of Pipeline Finished: SUCCESS

Banupriya | Last updated: Feb 23, 2021 04:40AM UTC

Hi Uthman, I'm trying to scan Rest API with Burp Enterprise from Jenkin pipeline. Build job is success but scan in not happening automatically in Burp. Also I could not see any option as token, header, client ID, client secret in Burp authentication option. Here is the error: {"error":"Unauthorized"}POST [Pipeline] } [Pipeline] // stage [Pipeline] } [Pipeline] // node [Pipeline] End of Pipeline Finished: SUCCESS

Banupriya | Last updated: Feb 23, 2021 05:48AM UTC

Update on the previous comment: Scan is happening automatically in Burp Enterprise now but scan is getting failed with the error "Error starting scan on Burp: Unknown host"

Uthman, PortSwigger Agent | Last updated: Feb 23, 2021 09:20AM UTC

The 'Uknown host' error indicates an issue with the DNS lookup between the agent attempting to complete the scan and the site you are scanning. Is that error showing for every site? (e.g. https://portswigger-labs.net) Or only the site you are scanning? If you perform a DNS lookup from the agent machine, do you see any errors?

Banupriya | Last updated: Feb 24, 2021 04:30AM UTC

Yes, seems like issue with DNS lookup. I'm getting the below error when I do DNS lookup from the agent machine. ** server can't find <host_name>

Uthman, PortSwigger Agent | Last updated: Feb 24, 2021 08:59AM UTC

Thanks for that information. You will need to resolve that issue first to ensure that the scanner can connect to the site being scanned. Please double-check this with your IT/Networking team.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.