Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

I'm trying to run a simple CURL command to download a scan report, but getting an Error with my APi token despite it being valid

Mitchell | Last updated: Mar 06, 2023 11:31PM UTC

I'm trying to download a report using the CLI and after a couple of minutes it gives me this error: "curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid" Here's the command I'm running and it's output, until I receive that error: --output scan_report.html --insecure -H "X-Api-Key: my_redacted_api_key" output >>> https://localhost:8080/burp/reporting/report/3/html % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- 0:02:00 --:--:-- 0 My api key is valid, I just created it. Am I just missing something else from the header, or what else could it be?

Michelle, PortSwigger Agent | Last updated: Mar 07, 2023 09:21AM UTC

Hi Are you using Burp Suite Professional or Burp Suite Enterprise? Can you tell us more about your current setup, please? If you are using Burp Suite Professional's REST API, this is limited in functionality and does not include the option to download a report in HTML format.

Mitchell | Last updated: Mar 07, 2023 06:20PM UTC

Hi Michelle, thanks for the response. I'm using Burp Suite Pro, so that probably explains why the CURL request isn't working then. Wasn't sure if it was possible with the Pro version or not

You need to Log in to post a reply. Or register here, for free.