The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

I'm trying to run a simple CURL command to download a scan report, but getting an Error with my APi token despite it being valid

Mitchell | Last updated: Mar 06, 2023 11:31PM UTC

I'm trying to download a report using the CLI and after a couple of minutes it gives me this error: "curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid" Here's the command I'm running and it's output, until I receive that error: --output scan_report.html --insecure -H "X-Api-Key: my_redacted_api_key" output >>> https://localhost:8080/burp/reporting/report/3/html % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- 0:02:00 --:--:-- 0 My api key is valid, I just created it. Am I just missing something else from the header, or what else could it be?

Michelle, PortSwigger Agent | Last updated: Mar 07, 2023 09:21AM UTC

Hi Are you using Burp Suite Professional or Burp Suite Enterprise? Can you tell us more about your current setup, please? If you are using Burp Suite Professional's REST API, this is limited in functionality and does not include the option to download a report in HTML format.

Mitchell | Last updated: Mar 07, 2023 06:20PM UTC