The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Headless Burpsuite

Edward | Last updated: Dec 08, 2020 02:51PM UTC

Hi, I am working with the latest version of burp suite and I am having issues running burp suite in headless mode. If I launch burpsuite and use the GUI to run my scan it works just fine. I am using burp suite as part of my automated testing pipeline so I need it to run in burpsuite and produce a report. I launch it with jre/bin/java -Xmx4g -Djava.awt.headless=true -jar /tmp/burpsuite_pro_v2020.11.3.jar --project-file=2020-12-04-payportal.burp --diagnostics --use-defaults --unpause-spider-and-scanner --auto-repair -p -v -c config.xml The project file is from the scan that I did through the gui. The config.xml file is: <?xml version="1.0" encoding="UTF-8"?> <config xmlns="http://nets.eu/burp/config"> <reportType>HTML</reportType> <targetSitemap><![CDATA[https://ottpapweb-dev.ls.cbn]]></targetSitemap> <scope> <url><![CDATA[https://ottpapweb-dev.ls.cbn/index.php]]></url> </scope> </config> I then get no output other then the diagnostics and WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by burp.h_j (file:/tmp/burpsuite_pro_v2020.11.3.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of burp.h_j WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release I can see by looking at the access logs on the server that I am scanning that the scan does at least start. Eventually the access to the site I am scanning stops but the report is never generated. Is there a step that I am missing? Thanks.

Uthman, PortSwigger Agent | Last updated: Dec 08, 2020 03:24PM UTC