Cannot start scan about burp-rest-api HOT 12 CLOSED

Give this a shot:

1. Build the jar (these instructions are for OSX, see issue 8 for more details) and run the service:

mkdir -p build/libs

mkdir lib &&
    cd lib &&
    ln -s /Applications/Burp\ Suite\ Professional.app/Contents/java/app/burpsuite_pro.jar burpsuite_pro.jar &&
    cd -

./gradlew clean build

cd build/libs

# Run it
java -jar burp-rest-api-1.0.0.jar --headless.mode=true

2. Set up dvwa. If you use docker, here's a one-liner to get you started:

docker run -d -p 85:80 --name=dvwa citizenstig/dvwa

3. Run burp against dvwa using the API:

# Add the target to scope
curl -X PUT --header 'Content-Type: application/json' --header 'Accept: application/json' 'http://localhost:8080/burp/target/scope?url=http://127.0.0.1:85'

# Spider the target
curl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' 'http://localhost:8080/burp/spider?baseUrl=http://127.0.0.1:85'

# Scan the target
curl -X POST --header 'Content-Type: application/json' --header 'Accept: */*' 'http://localhost:8080/burp/scanner/scans/active?baseUrl=http://127.0.0.1:85'

# Get Status of Scan
curl -X GET --header 'Accept: application/json' 'http://localhost:8080/burp/scanner/status'

# Create HTML Report
curl -X GET --header 'Accept: application/octet-stream' 'http://localhost:8080/burp/report?urlPrefix=http://127.0.0.1:85&reportType=HTML' -o testReport.html

This should give you some results to help you determine if things are working. Keep in mind that for this example you're not logging into the vulnerable web application, so there won't be a ton of vulnerability data.

from burp-rest-api.

I got the same problem on my side:

mkdir -p build/libs

mkdir lib &&
    cd lib &&
    ln -s /Applications/Burp\ Suite\ Professional.app/Contents/java/app/burpsuite_pro.jar burpsuite_pro.jar &&
    cd -

./gradlew clean build

cd build/libs

# Run it
java -jar burp-rest-api-1.0.0.jar --headless.mode=false

Then i call the endpoint for adding my url to the scope:

curl -X PUT --header 'Content-Type: application/json' --header 'Accept: application/json' 'http://localhost:8090/burp/target/scope?url=https://xxxxxxxxx.com/adexchange'

It works fine, my url is indeed in the scope, so i create a scan:

curl -X POST --header 'Content-Type: application/json' --header 'Accept: */*' 'http://localhost:8090/burp/scanner/scans/active?baseUrl=https://xxxxxxxxxxx/adexchange'

And nothing happen, nothing is scanned, in the UI, i can't see either my scan in progress.

2017-03-14 10:48:11.654  INFO 38489 --- [nio-8090-exec-5] c.v.burp.extension.service.BurpService   : Getting percentage complete.
2017-03-14 10:48:11.654  INFO 38489 --- [nio-8090-exec-5] c.v.b.e.domain.internal.ScanQueueMap     : Scan Queue is empty. Returning the Percent Complete as 100%.

Burp Pro 1.7.19.
OSX 10.12.3

Any help would be greatly appreciated.

Thanks

NB: if i run spider, it works fine, only the scanner (the things i would need to be run by jenkins) fail :/

from burp-rest-api.

Same here...

from burp-rest-api.

As per https://portswigger.net/burp/help/scanner_pointandclick.html, I'm pretty sure you're going to need to spider a site before you can scan it (so that it knows what to scan). Why not have jenkins run the spider and follow that action up with running a scan? You could write a little script that would run the spider, wait until spidering was finished, and then run your scan. Here's a rough idea of what I'm talking about in terms of the middle piece:

def wait_until_finished_spidering(self):
         finished_spidering = False
         while not finished_spidering:
             prev_resp = get_resp()
             time.sleep(5)
             resp = get_resp()
             # Responses haven't changed, we're ready to scan and have finished crawling the site
             if len(prev_resp.content) == len(resp.content):
                 return

You can use something like this to get the response:

resp = requests.post("%s:%s/burp/scanner/scans/active?baseUrl=%s://%s%s%s" % (
                 api_host, api_port, service, target, port, uri))

from burp-rest-api.

@l50, and how do I know that spidering has finished? I haven't seen any API endpoint related to that. Thanks for your help!

from burp-rest-api.

There is not an endpoint for that, which is why I provided the python snippet that you could potentially use to determine if spidering has finished. Or you can take the logic and turn it into whatever language meets your needs. That's the beauty of REST API's, right?

from burp-rest-api.

Regarding your code: What should get_resp() do? Get a response from what ?

from burp-rest-api.

Nobody?!

from burp-rest-api.

@dorneanu get_resp() returns response from API call /burp/scanner/scans/active.
This is how i am using these APIs.

1. check_burp_sitemap() : /burp/target/sitemap
2. add_site_to_scope() : /burp/target/scope
3. start_active_scan() : /burp/scanner/scans/active
4. poll_scan_status() : /burp/scanner/status
5. get_burp_scan_html_report() : /burp/report?reportType=HTML

from burp-rest-api.

closing this issue due to inactivity.

from burp-rest-api.

@steve-heslouin
@stevespringett
Hello guys,thanks for posting out your issues,i have not yet automated scans,however was curious to know,was this issue fixed?,as it would probably be a good reference point for many people including myself,for solving,if this issue appears.
Thanks

from burp-rest-api.

I had similar issues and fixed with this change #30, FYI. Details of my specific issue in the PR.

from burp-rest-api.