Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Restore Scanning Machine?

Jens | Last updated: Jul 20, 2023 12:23PM UTC

Heya, we are currently using 2 scanning machines, which occasionally become broken due to issues with the scanned application code. What is the best practice to restore a scanning machine to some defined snapshot? What I would love to do is something like this: 1. Deploy application to scan 2. Create snapshot (e.g. triggering some API to create the snapshot of the VM) 3. Scan&report 4. Rollback to snapshot (e.g. triggering some API to restore the snapshot of the VM) Is it possible to do this inside the Burp Suite (some hook or something, could not find it) or has this to be handled outside (e.g. some cronjobs)? Thank you!

Jens | Last updated: Jul 20, 2023 03:09PM UTC

Oh I just realized I did an major typo. I'm not talking about "scanning machines" (aka scanning agents) but the scanned target/site. I just wonder if there is a way to automate preparation and/or cleanup of the scanned target/site with Burp Suite Enterprise.

Alex, PortSwigger Agent | Last updated: Jul 21, 2023 07:49AM UTC

Hi, Thanks for your post. This would likely need to be handled outside of Burp Suite Enterprise - there is no native functionality that would trigger a restore of the target application from a snap/backup. Having said that, the GraphQL functionality within Burp Suite Enterprise may provide some integration with your automated workflow, for example, retrieving the status of a scan in order to trigger the restore. I've linked our GraphQL API overview documentation below and the schema for your review. Additionally, we have a CLI utility and Python client library for GraphQL, which you may find helpful: - https://portswigger.net/burp/documentation/enterprise/api-documentation/graphql-api/graphql - https://portswigger.net/burp/extensibility/enterprise/graphql-api/scanstatus.html - https://github.com/olliewuk/bseept An example query to retrieve scan status: query ScanInfo { scans(scan_status:[failed,cancelled,succeeded]){ id site_id status } } Best regards,

Jens | Last updated: Jul 21, 2023 09:31AM UTC