Burp Suite User Forum

Create new post

software vulnerability scanner (burp extension based on vulners.com api)

mr | Last updated: Sep 30, 2022 09:33AM UTC

software vulnerability scanner (burp extension based on vulners.com api) not working- gives 405 method not allowd error. Still api quota is remaining. Another error from extension's tab(software vulnerability scanner) : org.json.JSONException: A JSONObject text must begin with '{' at 1 [character 2 line 1] at org.json.JSONTokener.syntaxError(JSONTokener.java:451) at org.json.JSONObject.<init>(JSONObject.java:195) at org.json.JSONObject.<init>(JSONObject.java:319) at burp.HttpClient.parseResponse(HttpClient.java:51) at burp.HttpClient.get(HttpClient.java:43) at burp.VulnersService.loadRules(VulnersService.java:133) at burp.BurpExtender.initPassiveScan(BurpExtender.java:41) at com.codemagi.burp.PassiveScan.initialize(PassiveScan.java:37) at com.codemagi.burp.BaseExtender.registerExtenderCallbacks(BaseExtender.java:49) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:64) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:564) at burp.fgy.lambda$registerExtenderCallbacks$0(Unknown Source) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630) at java.base/java.lang.Thread.run(Thread.java:832) Any idea? help appreciated

Hannah, PortSwigger Agent | Last updated: Oct 03, 2022 08:57AM UTC

Hi Could you tell me the version of Burp that you are having this issue with? If you try an older version of Burp, do you still have the same issue? Issues can be reported to the extension's author on their GitHub repository. You can find the one for Software Vulnerability Scanner here: https://github.com/vulnersCom/burp-vulners-scanner/issues It looks like this has already been raised here: https://github.com/vulnersCom/burp-vulners-scanner/issues/17

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.