Meghana |
Last updated: Mar 08, 2021 10:26AM UTC
/Library/Java/JavaVirtualMachines/jdk-13.0.2.jdk/Contents/Home/bin/java -Xmx4G -Djava.awt.headless=true -classpath burpsuite_pro_v2021.2.1.jar burp.StartBurp --unpause-spider-and-scanner -c config.xml
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by burp.epi (file:/Users/admin/Desktop/JAR/burpsuite_pro_v2021.2.1.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of burp.epi
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Uthman, PortSwigger Agent |
Last updated: Mar 08, 2021 10:56AM UTC
It looks like you are trying to use Burp Professional headlessly for unattended scanning. The -c parameter does not exist for the JAR. I would recommend running it with --help to see the options that are available (https://portswigger.net/burp/documentation/desktop/getting-started/launching/command-line). Have you looked at the REST API?
- https://portswigger.net/blog/burps-new-rest-api
Our Enterprise product has been designed specifically for this use-case so I would encourage you to apply for a free 30-day trial:
- https://portswigger.net/burp/enterprise/trial
Meghana |
Last updated: Mar 10, 2021 06:25AM UTC
Hi Uthman, Thank you for replying. I am following this link : https://netsoss.github.io/headless-burp/user-guide/burp-extensions/headless-burp-scanner/#usage and it has input as config.xml file. But still the command gets stuck and nothing happens. Could you help on that?
Also the REST API doc is very minimal. Do you have any other references for REST API?
Thanks
Uthman, PortSwigger Agent |
Last updated: Mar 10, 2021 09:19AM UTC
Hi Meghana,
The link you have shared is not something written by our developers and is not compatible with the latest version of Burp. You will need to contact the developer of the tool and ask them to integrate with the latest version of Burp.
For the REST API, I would recommend navigating to it so that you can play around with the different endpoints. If you have any specific questions, please send screenshots and further information to support@portswigger.net