The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

crawl a modern app with headless mode

Khaled | Last updated: Sep 21, 2021 03:33AM UTC

hello , I want to crawl a modern app written in ReactJS , here is my target map ``` / [GET] /user/login [POST , GET] /user/create [POST , GET] /about [GET] ``` but burp crawler return root page only I think chrome browser doesn't start with burp, also I didn't get any error message while burp start please note that I'm using burp headless mode (burp-rest-api) if some options require GUI and can be done in headless please tell me about it My Env: OS : Ubuntu 21 (64) Java: OpenJDK 8 Burp: 2.1.05-534 Burp Suite Professional Run with : non-root user best regards

Ben, PortSwigger Agent | Last updated: Sep 21, 2021 09:36AM UTC

Hi Khaled, The version of Burp you are using is nearly two years old and, at that point in time, browser powered scanning was still in the experimental stage and was not turned on by default (your scan would be using the legacy scanning method which does not cope at all well with more modern navigational techniques). Are you able to update your version of Burp Professional to the latest version and attempt your scan again? Using the latest version of Burp means that scans will both be using browser powered scanning by default and also that you will be able to take advantage of the improvements that we have made to browser powered scanning in the intervening time period. Cheers Ben Wright Technical Product Specialist PortSwigger

Khaled | Last updated: Sep 21, 2021 02:22PM UTC

Thanks for your replay, I updated my version to the last version of burp but after selecting the target I still get the same results so I need to change options for start? best regards Khaled

Ben, PortSwigger Agent | Last updated: Sep 22, 2021 07:09AM UTC