Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How do I automate Active Scanning

Sergey | Last updated: Nov 28, 2016 03:23AM UTC

Hi! Which Extender APIs should I be looking at if I want to automate the following (similar to Carbonator but a bit different): 1. My extension runs in headless mode (as Carbonator does). 2. Target URL and the whole body of the HTTP request to run active scan on are provided via a command-line parameter (e.g. from a file) 3. Active scan is run against that HTTP request (as if it was a right-click->"Active Scan" on a request in the HTTP Proxy tab). 4. Same as above but with custom insertion points (as if it was a right-click->"Active Scan defined insertion points" in Intruder). Getting the results should be rather straightforward after that. Or there going to be issues with the HTTP request body itself? And it might be easier to feed the Burp Proxy first using an external tool, such as pushing curl requests through it, and then invoke Active Scanner on these requests? Thanks!

PortSwigger Agent | Last updated: Nov 29, 2016 09:53AM UTC