Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Bulk Export of XML Reporting from Burp Session File

ooi26l | Last updated: Nov 29, 2017 07:44PM UTC

Is there a way to given Burp Suite in Windows or Linux command line arguments such that, given a saved copy of a Burp session, I can dump the XML copy of the report? I have hundreds of reports from multiple projects we review and I wish to export the XML for a reporting tool we have begun to use only recently. Google searches lead me to think it is not easily possible. Am I missing something?

PortSwigger Agent | Last updated: Nov 30, 2017 09:04AM UTC

There isn't a built-in feature for this. However, I've build you a very basic extension which I think does what you need. The extension is here: - https://gist.github.com/pajswigger/752a5a29eec9c5ad0599a995c67ce51a You can use it like this: - java -jar burpsuite_pro.jar --project-file myproj.burp --report myproj.xml Let us know how you get on.

PortSwigger Agent | Last updated: Nov 30, 2017 09:27AM UTC

To avoid any confirmation popups, start Burp in headless mode: - java -Djava.awt.headless=true -jar burpsuite_pro.jar —project-file myproj.burp —report myproj.xml

Burp User | Last updated: Nov 30, 2017 02:28PM UTC

Oh that's great work. Thank you! I will definitely try to improve upon this gist and report back if I make improvements!

PortSwigger Agent | Last updated: Nov 30, 2017 02:33PM UTC

Hi Corey, That extension is not a BApp. To install it, you to Extender > Extensions and click Add.

Burp User | Last updated: Dec 16, 2017 02:23AM UTC

I copied your extension to Report.py and tried to install the extension manually using Burp. It warns me BApp verification failed (which is not surprising) and when I tell it to continue anyway it won't install; the message is "Failed to verify BApp file". What do I have to do to use this extension in Burp?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.