Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Silent Installation for BurpSuite Enterprise Edition

Javvadi, | Last updated: Dec 17, 2020 03:59PM UTC

Hi, I am planning to install BSEE for an environment in my company and I would like to know if there is a way that I could run the shell script "burp_enterprise_linux_v2020_11.sh" by passing the input values as parameters(for directories, DB information etc.) instead of the user involvement during installation. Thanks, Ramya J

Liam, PortSwigger Agent | Last updated: Dec 18, 2020 09:43AM UTC

Creating an unattended install process is relatively simple. You will need to perform the installation manually once, entering all the options that you want the unattended installation to use. When the install is complete, there will be a response.varfile located in the .install4j folder in the application folder you chose during installation. Take a copy of this file. To perform an unattended install, run the installer using the following command line: ./burp_enterprise_linux_v2020_11.sh -c -q -varfile response.varfile Use the latest installer and the response.varfile you copied in the previous step. This will repeat the installation you performed manually without requiring any user interaction. You may need to add additional parameters to the response.varfile, as these do not appear to be captured during the initial setup process: db_url_suffix=<URL OF DB, EXCLUDING jdbc:mysql://> db_es_username=<USERNAME OF ENTERPRISE SERVER DB USER> db_es_password=<PASSWORD OF ENTERPRISE SERVER DB USER> db_agent_username=<USERNAME OF AGENT DB USER> db_agent_password=<PASSWORD OF AGENT DB USER> admin_user_password=<admin password> admin_user_confirm_password=<admin password> admin_email=<admin email address> An example response.varfile for a PostGres DB: admin_user_name=administrator admin_email=dummy@test.com admin_user_password=letmein admin_user_confirm_password=letmein anonymousFeedback$Boolean=false beuser=burpsuite beuserandgroup=burpsuite\\:burpsuite dataDirectory=/var/lib/BurpSuiteEnterpriseEdition databaseBackupsDirectory=/var/lib/BurpSuiteEnterpriseEdition dbType=postgres db_url_suffix=localhost/burp_enterprise db_es_username=burp_enterprise db_es_password=<PASSWORD> db_agent_username=burp_agent db_agent_password=<PASSWORD> escapedDataDir=/var/lib/BurpSuiteEnterpriseEdition escapedInstallationDir=/opt/burpsuite_enterprise jreHome=/opt/burpsuite_enterprise/jre logsDirectory=/var/log/BurpSuiteEnterpriseEdition platformScriptSuffix=sh sys.adminRights$Boolean=true sys.component.agent$Boolean=true sys.component.db$Boolean=false sys.component.enterprise$Boolean=true sys.component.web$Boolean=true sys.installationDir=/opt/burpsuite_enterprise sys.languageId=en sys.programGroupDisabled$Boolean=true webserver_port$Integer=8080

Javvadi, | Last updated: Dec 21, 2020 06:42PM UTC

Thank you! It worked when I removed the -c. Also would like to know if we can pass the license in the command line as -- accept-license? or do we have to only upload it through the webconsole?

Uthman, PortSwigger Agent | Last updated: Dec 22, 2020 10:12AM UTC

That is great! Unfortunately, there is no command-line parameter for the license key so you will need to upload it in the portal.

Javvadi, | Last updated: Dec 22, 2020 08:58PM UTC

Ok no problem, Also is there a way that I can download the zip file from internet (burp_enterprise_linux_v2020_11.zip) using wget?

Liam, PortSwigger Agent | Last updated: Dec 23, 2020 11:38AM UTC

Yes, you can use Wget on our releases page - https://portswigger.net/burp/releases. You can find the appropriate link by viewing the page source.

Javvadi, | Last updated: Dec 29, 2020 04:52PM UTC

I have difficulty identifying it from page source. Is there any example link so that I can understand how it would be?

Jose | Last updated: Dec 29, 2020 09:40PM UTC

Here is an example: wget -O burp-enterprise.zip "https://portswigger.net/burp/releases/download?product=enterprise&type=linux&version=2020.12"

Liam, PortSwigger Agent | Last updated: Dec 30, 2020 12:06PM UTC

Thanks, Jose.

Javvadi, | Last updated: Jan 05, 2021 03:58PM UTC

Thank you ! I was able to download it with the provided url.

Javvadi, | Last updated: Jan 05, 2021 03:58PM UTC

Thank you ! I was able to download it with the provided url.

Javvadi, | Last updated: Jan 05, 2021 03:58PM UTC

Thank you ! I was able to download it with the provided url.

Javvadi, | Last updated: Jan 05, 2021 04:00PM UTC

I tried to scan one of the application urls foloowing one of your video tutorials and I see the status of scan as below. "Failed 10 consecutive audit items have failed." Do I need to add any scan configurations to resolve this error?

Javvadi, | Last updated: Jan 05, 2021 07:33PM UTC

Hi, I was trying to trigger the burp scan from Rest API. I see few options that I can select but I have no idea on what they are? Can I get a little more information on these? 1.What is scan scope? What does simple scope and advanced scope have and how do I need to select them? 2. What is application_logins for? Is it to login to the application for the scanning? How does UsernameAndPasswordLogin differ from RecordedLogin? 3.What is resource_pool? 4. What is scan_callback? Also while instaling the Burpsuite Enterprise Edition, I gave details of external database for the master and agents to connect? What information does this BSEE store in the database?Can I view the data?(My database is PostgresSQL)

Javvadi, | Last updated: Jan 05, 2021 07:48PM UTC

Also in the Rest API how can I mention the site to be created inside a folder? curl -vgw "\n" -X POST 'http://localhost:port/api/xxxxxxxxxxxxxxxxxxxxxx/v0.1/scan' -d '{"name":"SampleScan","scan_configurations":[{"name":"Never stop audit due to application errors","type":"NamedConfiguration"}],"urls":["url1","url2"]}' How can I create a site named SampleScan inside a folder Dev using the API above?

Liam, PortSwigger Agent | Last updated: Jan 07, 2021 09:22AM UTC

Ramya, you can use the scan config settings to stop the scan from failing - https://portswigger.net/burp/documentation/enterprise/working/scans/scan-configs There is a section for Handling application errors.

Liam, PortSwigger Agent | Last updated: Jan 07, 2021 09:24AM UTC

Have you tried using the GraphQL API? This offers more functionality and has greater documentation. - https://portswigger.net/burp/extensibility/enterprise/graphql-api/

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.