burp-rest-api: sitemap not getting populated with urls through config file

Describe the bug sitemap not getting populated with urls through config file

To Reproduce

Steps to reproduce the behavior:

Create a config.json file

json is as follows: {“config”: { “targetSitemap”: “http://localhost:5432”, “scope”: [ “http://localhost:5432/auth”, “http://localhost:5432/users”, “http://localhost:5432/users/1”, “http://localhost:5432/users?search=asd”, “http://localhost:5432/bar/foo” ] } }

started the burp with burp-rest-api.bat --headless.mode=false --config-file=config.json

Burp got started but sitemap was not populated

I have also tried with below config.xml file <?xml version="1.0" encoding="UTF-8"?> <config> <reportType>HTML</reportType> <targetSitemap><![CDATA[http://localhost:5432]]></targetSitemap> <scope> <url><![CDATA[http://localhost:5432/auth]]></url> <url><![CDATA[http://localhost:5432/users]]></url> <url><![CDATA[http://localhost:5432/users/1]]></url> <url><![CDATA[http://localhost:5432/users?search=asd]]></url> <url><![CDATA[http://localhost:5432/bar/foo]]></url> </scope> </config>

It came with json file not supported for config files type error.

@ikkisoft @adracea any inputs?

About this issue

Original URL
State: closed
Created 4 years ago
Comments: 18 (9 by maintainers)

Most upvoted comments

@hardikrana437 I think it’s --config-file=config.json . You might need to do the config in the UI and export the project configuration but this should work .

adracea on Jun 25, 2020

That still isn’t a valid Burp Suite configuration file. You can use the one below :

{
    "target":{
        "scope":{
            "advanced_mode":false,
            "exclude":[],
            "include":[
                {
                    "enabled":true,
                    "prefix":"http://localhost:5432/auth"
                },
                {
                    "enabled":true,
                    "prefix":"http://localhost:5432/users"
                },
                {
                    "enabled":true,
                    "prefix":"http://localhost:5432/bar/foo"
                }
            ]
        }
    }
}

In order to build the sitemap , you’d have to browse or spider each of these URLs , save the session file ( session.burp ) , and then use --project-file=session.burp when starting up .

adracea on Jun 25, 2020