Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Error starting scan on Burp: Not all seed URLs are in scope

Jon | Last updated: May 05, 2019 12:28PM UTC

Hi, We're running Burp Suite Enterprise v1.0.15beta and use the HTTP API to register sites for scanning during nightly builds. The sites are registered based on endpoints extracted from swagger files (OpenAPI) and currently some of the the URLs included in the sites scope have curly braces (e.g. ["https://scanme.org/api/v1/login", "https://scanme.org/api/v1/person/{id}"]). This works fine, but for some of the sites the scan fails and we get the error message: "Error starting scan on Burp: Not all seed URLs are in scope". All URLs are part of the same site, so the error message seems incorrect. If we rerun the scan manually, it sometimes works, sometimes not. We can't seem to find any more information on this error in the logs. How can we get more information on this error? More logs? Regards, Jon Even Rosengren

Rose, PortSwigger Agent | Last updated: May 07, 2019 10:41AM UTC

Thanks for your message. If possible, we'd like some further information on your installation. Please get back to us with the following: The operating system on which you installed Burp Suite Enterprise. The database type you are using. Whether the Enterprise Agent installations are on the same machine on which you installed Burp Suite Enterprise, or elsewhere. Can you email us (support@portswigger.net) your log files: By default these are in C:\ProgramData\BurpSuiteEnterpriseEdition on Windows and /var/log/BurpSuiteEnterpriseEdition/ on Linux. There is a separate log file for each day, and the current day's log file doesn't contain a date. If you can, please replicate the issue then send us the latest log files. The agent log files can be found on the agent machine.

Burp User | Last updated: Jul 22, 2019 11:42AM UTC

I have a very similar issue with enterprise license and only with one url. do you have any solution?

Liam, PortSwigger Agent | Last updated: Jul 22, 2019 01:25PM UTC

Ammy, if possible, we'd like some further information on your installation. Please get back to us with the following: The operating system on which you installed Burp Suite Enterprise. The database type you are using. Whether the Enterprise Agent installations are on the same machine on which you installed Burp Suite Enterprise, or elsewhere. Can you email us (support@portswigger.net) your log files: By default these are in C:\ProgramData\BurpSuiteEnterpriseEdition on Windows and /var/log/BurpSuiteEnterpriseEdition/ on Linux. There is a separate log file for each day, and the current day's log file doesn't contain a date. If you can, please replicate the issue then send us the latest log files. The agent log files can be found on the agent machine.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.