Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

active scan is waiting

hong | Last updated: Jan 26, 2017 08:07PM UTC

Hi, I am working on extension that will send the url to do active scan. I noticed the urls I sent are all in "waiting" and need me to manually click "resume". Is there a way to make it scan without manual intervention? Thanks

PortSwigger Agent | Last updated: Jan 27, 2017 09:10AM UTC

It sounds like the Scanner is in a globally paused state, perhaps because you have reopened an existing project, and the default option is to pause the Scanner when this is done. If the Scanner is already running, then items sent for scanning via the API will be scanned as soon as a thread is available, without the user needing to resume anything.

Burp User | Last updated: Jan 27, 2017 04:04PM UTC

You are correct, I reopened an existing project. What is the best way to bring up Burp in following configuration? Currently I load an existing project which has user/passwd set for spider, and load extension, listen on port 8081, then I have to manually turn off proxy intercept, and manually resume scanner (1) proxy intercept is off (2) proxy listening on port 8081 (3) user/password for spider is set (4) extension loaded (5) session management is using cookies from burp cookie jar for spider and scanner (6) scanner is running Is there a way to save all these into one user configuration file (instead of project file), and load this file from command line/GUI? Help is appreciated!

PortSwigger Agent | Last updated: Jan 27, 2017 04:20PM UTC

Your project settings (e.g. the proxy listener) will be saved in your project file. User settings (e.g. extension to load) can be saved in a user-level config file, and specified on the command line using the --user-config-file option. If you want to fully automate everything, then try launching Burp in headless mode, and the Spider/Scanner won't be paused.

Burp User | Last updated: Jan 27, 2017 07:56PM UTC

Is there a way to make scanner started without headless mode? Can I start scanner from API? Tried headless mode, it can scan, but Burp won't accept my log in from curl command, always say "403 forbidden", "untrusted host", not able to refresh the cookie jar, therefore the session is invalid

Burp User | Last updated: Jan 27, 2017 08:42PM UTC

Can I load project file without pausing the scanner? I saw there is option on the GUI, can I do it on commandline, or API? Or: If I use config file, will the scanner not paused? If not paused, how to bypass the GUI (select project) so that I can bring up burp automatically?

PortSwigger Agent | Last updated: Jan 30, 2017 09:40AM UTC

1. This option is only shown in the startup UI. 2. The only way to bring the Scanner up unpaused is to uncheck the box in the startup UI, or run Burp headlessly. We'll look into adding a command-line option to bring up the Scanner and Spider unpaused in non-headless mode.

Burp User | Last updated: Jan 30, 2017 02:37PM UTC

problem solved with headless mode

PortSwigger Agent | Last updated: Jan 30, 2017 03:07PM UTC

Just to let you know that in today's release (1.7.17) we have added a new command line argument for this purpose: --unpause-spider-and-scanner Thanks again for your feedback, and please do let us know if you run into any other problems.

Burp User | Last updated: Jun 11, 2018 10:18AM UTC

Can you tell me how to solve this problem .Step by Step plzzzzzzzzzzzzzzzzzz

Liam, PortSwigger Agent | Last updated: Jun 11, 2018 10:18AM UTC

Syed, could you provide us some details about the issue you are having?

Burp User | Last updated: Jun 11, 2018 06:44PM UTC

My active active scan is still waiting and it doesn't work/

Burp User | Last updated: Jun 12, 2018 07:29AM UTC

What about [Right Click] - [Resume scanner].

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.