Burp Suite User Forum

Create new post

Burp 2 Beta API key issues

Seth | Last updated: Nov 16, 2018 02:08PM UTC

When the Burp 2 REST API is enabled and the "Allow access without an API key" option is enabled and there is an API key added it is not possible to use the API key to make API calls. For example this: http://127.0.0.1:1337/<api key>/v0.1/ will give me an "Invalid API version" error message. This is incredibly confusing. What I expect to happen is that the API keys that exist should work and I can also call the APIs without a key.

Adam, PortSwigger Agent | Last updated: Nov 16, 2018 03:51PM UTC

Hi Seth, I've put in a fix to make the API behave more sensibly in this case, thanks for your feedback.

Liam, PortSwigger Agent | Last updated: Nov 29, 2018 11:24AM UTC

Just to let you know that this issue should be fixed in the latest release (2.0.13). Thanks for your feedback and please let us know if you run into any other problems.

Burp User | Last updated: Dec 06, 2018 02:15PM UTC

Thanks! I did confirm this was fixed in 2.0.13. Thanks again!

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.