Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

How do I download Burp updates without going through the GUI?

Luc | Last updated: May 27, 2020 09:15AM UTC

When launching Burp Professional, it prompts me to update and I can choose to download the update directly from the Burp interface itself. Since I have an isolated VM for each client project, I need to do the update for a few current projects plus the origin/golden VM. Is it possible to download and install this update automatically with some command? The default options selected in the interface are always fine, I'm just waiting for it to do its thing while clicking next next finish every time. I'm imagining something like: BurpSuitePro --download-update && sh ~/Downloads/burp*.sh --yes && rm ~/Downloads/burp*.sh Is that possible, or do I need to script the GUI with something like xdotool?

Uthman, PortSwigger Agent | Last updated: May 27, 2020 11:29AM UTC

Unfortunately, there is no way to do this natively (e.g. via a command-line argument). You could try writing some code similar to https://github.com/pajswigger/update-burp or seeing if that still works?

Luc | Last updated: May 27, 2020 07:16PM UTC

Thanks for the pointer, Uthman! Unfortunately that doesn't seem to work anymore, it reports that version 2020.4 is up to date whereas 2020.4.1 is the latest version (and my installation indeed prompts me on startup). I'm guessing the update checking API changed, is there documentation for that or could you tell me what the endpoint specification looks like? It currently uses this[1] and that apparently returns an empty response since this[2] line triggers for me. [1] https://github.com/pajswigger/update-burp/blob/master/src/update-burp.kt#L159 i.e. "https://$portswigger/Burp/Releases/CheckForUpdates?product={name}&version={currentversion}&license={xyz}" [2] https://github.com/pajswigger/update-burp/blob/master/src/update-burp.kt#L33

Uthman, PortSwigger Agent | Last updated: May 28, 2020 12:05PM UTC

We have a feature request in our development backlog to add some update functionality to the command-line arguments. Unfortunately, we do not have any further documentation on this. Do you see any errors? You could try adding some logging to the Kotlin script to find out where the issue is?

Luc | Last updated: Jun 02, 2020 07:34AM UTC

The only 'error' I'm seeing is the one I mentioned under [2] above, "Already up to date". But if this is in the development pipeline then I can also just wait for those command-line options :). Any idea when that backlog item might be tackled?

Uthman, PortSwigger Agent | Last updated: Jun 02, 2020 01:10PM UTC

Unfortunately, I cannot provide an exact ETA on this but I will update this thread.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.