The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Getting the warning as below details on executing the jarfile and the process is stuck and nothing happens further. I have a mac on which Burp Suite Professional and jdk 13 are installed. Please help out on the isse

Meghana | Last updated: Mar 08, 2021 10:26AM UTC

/Library/Java/JavaVirtualMachines/jdk-13.0.2.jdk/Contents/Home/bin/java -Xmx4G -Djava.awt.headless=true -classpath burpsuite_pro_v2021.2.1.jar burp.StartBurp --unpause-spider-and-scanner -c config.xml WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by burp.epi (file:/Users/admin/Desktop/JAR/burpsuite_pro_v2021.2.1.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of burp.epi WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release

Uthman, PortSwigger Agent | Last updated: Mar 08, 2021 10:56AM UTC

It looks like you are trying to use Burp Professional headlessly for unattended scanning. The -c parameter does not exist for the JAR. I would recommend running it with --help to see the options that are available (https://portswigger.net/burp/documentation/desktop/getting-started/launching/command-line). Have you looked at the REST API? - https://portswigger.net/blog/burps-new-rest-api Our Enterprise product has been designed specifically for this use-case so I would encourage you to apply for a free 30-day trial: - https://portswigger.net/burp/enterprise/trial

Meghana | Last updated: Mar 10, 2021 06:25AM UTC

Hi Uthman, Thank you for replying. I am following this link : https://netsoss.github.io/headless-burp/user-guide/burp-extensions/headless-burp-scanner/#usage and it has input as config.xml file. But still the command gets stuck and nothing happens. Could you help on that? Also the REST API doc is very minimal. Do you have any other references for REST API? Thanks

Uthman, PortSwigger Agent | Last updated: Mar 10, 2021 09:19AM UTC