Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Resume the Scanner thru API

Deepak | Last updated: Jun 22, 2016 05:17PM UTC

As of Burp 1.7+, when the Burp Suite is launched with "--project-file" option at command line, the Spider and Scanner tools will be automatically paused when the project reopens. My understanding is, even though Spider is paused, it starts running upon calling sendToSpider() method from API. How do we enable the scanner (resume the scanner) or get the Scanner to be Ready instead of Paused? Thanks.

PortSwigger Agent | Last updated: Jun 23, 2016 08:11AM UTC

If you are running Burp headless (for automated use via the API) then the Scanner shouldn't be paused when reopening a project file. If you are running with a headed UI then the user will need to pause and unpause the Scanner, which we think is safer.

PortSwigger Agent | Last updated: Jun 23, 2016 08:18AM UTC

We're still not seeing this problem. If you start Burp in headless mode with an existing project, e.g. using: -Djava.awt.headless=true --project-file=~/headlesstest.burp then the Scanner is not paused. If you have existing pending items in the active scan queue of the project, then Burp immediately begins scanning them when it starts up. Are you actually running Burp in headless mode, so that there is no Burp UI window?

Burp User | Last updated: Aug 03, 2016 05:28PM UTC

I'm experiencing this behavior as well. I have an extension that is running in headless mode. It builds a large scan queue, but then all of the completion percentages remain at zero.

Burp User | Last updated: Aug 03, 2016 05:29PM UTC

Is there a project configuration to allow scanning to remain automatic? (Preferably via a JSON entry.)

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.