The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Configuring and automating BurpSuite Enterprise Edition scans

Zac | Last updated: Jul 16, 2021 02:13PM UTC

I'm evaluating BurpSuite Enterprise Edition and had a question for anyone who might have experience using it. Architecturally, BurpSuite EE (hereafter "BSEE") seems to have the following componentry: - A web app; used by SecOps to login and manage/configure/run scans - 1+ "Agent machines"; servers where "Agents" are installed and running and communicating back to the web app; apparently each Agent machine can run 1+ Agents - Agents, software agents installed on agent machines, responsible for running scans against targets and reporting back to the web app - The targets that are scanned by the agents Assuming I'm correct on my understanding of these (which, if I'm not, please begin by correcting me!!!), I'm wondering what the relationships & cardinalities between all these things are. Say I have 20 microservices (web services using HTTPS) that I want to scan. Do I install the Agents on the 20 servers for each of these 20 microservices, or do I have dedicated "security scanner servers" that I install Agents on, and then configure those agents to run scan against my 20 microservice servers? So that's my main question, but I also had two other smaller concerns, specifically: - In the web UI it looks like you can either run scans immediately, ad hoc/on demand, or according to a schedule. But what if you want to integrate the scans into your deployment pipeline, automatically? Is there a way to kick off a scan via command line or API and then fetch the report (HTML, XML, PDF, etc.) from disk? - Is it possible for developers to configure scans in Community or Pro Edition, export those scan configurations, and import them into BSEE? How about vice versa? Thanks in advance for any and all concerns!

Maia, PortSwigger Agent | Last updated: Jul 19, 2021 09:56AM UTC