Burp Suite User Forum

Login to post

Getting the warning as below details on executing the jarfile and the process is stuck and nothing happens further. I have a mac on which Burp Suite Professional and jdk 13 are installed. Please help out on the isse

Meghana | Last updated: Mar 08, 2021 10:26AM UTC

/Library/Java/JavaVirtualMachines/jdk-13.0.2.jdk/Contents/Home/bin/java -Xmx4G -Djava.awt.headless=true -classpath burpsuite_pro_v2021.2.1.jar burp.StartBurp --unpause-spider-and-scanner -c config.xml WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by burp.epi (file:/Users/admin/Desktop/JAR/burpsuite_pro_v2021.2.1.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of burp.epi WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release

Uthman, PortSwigger Agent | Last updated: Mar 08, 2021 10:56AM UTC

It looks like you are trying to use Burp Professional headlessly for unattended scanning. The -c parameter does not exist for the JAR. I would recommend running it with --help to see the options that are available (https://portswigger.net/burp/documentation/desktop/getting-started/launching/command-line). Have you looked at the REST API? - https://portswigger.net/blog/burps-new-rest-api Our Enterprise product has been designed specifically for this use-case so I would encourage you to apply for a free 30-day trial: - https://portswigger.net/burp/enterprise/trial

Meghana | Last updated: Mar 10, 2021 06:25AM UTC

Hi Uthman, Thank you for replying. I am following this link : https://netsoss.github.io/headless-burp/user-guide/burp-extensions/headless-burp-scanner/#usage and it has input as config.xml file. But still the command gets stuck and nothing happens. Could you help on that? Also the REST API doc is very minimal. Do you have any other references for REST API? Thanks

Uthman, PortSwigger Agent | Last updated: Mar 10, 2021 09:19AM UTC

Hi Meghana, The link you have shared is not something written by our developers and is not compatible with the latest version of Burp. You will need to contact the developer of the tool and ask them to integrate with the latest version of Burp. For the REST API, I would recommend navigating to it so that you can play around with the different endpoints. If you have any specific questions, please send screenshots and further information to support@portswigger.net

You need to Log in to post a reply. Or register here, for free.