Burp community forum

headless xml report with

karun | Last updated: Aug 19, 2019 08:56AM UTC

Hi Guys, Looking for quick help how can we get an XML report with base64 as false <request method="GET" base64="false">. I mean I need request and response in plain text rather than base64 encoded. I ran burp in headless mode. java -jar -Xmx1g -Djava.awt.headless=true "C:\Program Files\BurpSuitePro\burpsuite_pro.jar" --config-file=burpprojectoptions1.json --project-file=project.burp -c config.xml confix.xml will have the below data: <?xml version="1.0" encoding="UTF-8"?> <config xmlns="http://nets.eu/burp/config"> <reportType>XML</reportType> <targetSitemap><![CDATA[http://[Host]/dvwa]]></targetSitemap> <scope> <url><![CDATA[http://[Host]/dvwa/]]></url> <exclusions> <!-- optional --> <exclusion><![CDATA[http://[Host]/dashboard/]]></exclusion> <exclusion><![CDATA[http://[Host]/phpmyadmin/]]></exclusion> </exclusions> </scope> </config>

Mike, PortSwigger Agent | Last updated: Aug 19, 2019 12:31PM UTC

Hi Karun, can you confirm that you are using the Headless Burp extension to perform this action? https://github.com/PortSwigger/headless-burp If so, unfortunately you will need to contact the author of that extension for technical support queries. In the Burp Suite UI, there is a checkbox option in the scan reporting wizard which can be found at the following location: Issue Activity > Report Issue > XML > Base64-encode requests and responses, which if disabled would give you the report contents in plain text format if you are able to access the UI.

Burp User | Last updated: Aug 19, 2019 01:22PM UTC

Hi Mike, Thank you for the response. Yeah I know about the UI part but do we have any option available in burp command line for xml reporting apart from headlessburp or carbonator?

You need to Log in to post a reply. Or register here, for free.