Burp Suite User Forum

Create new post

Integrating Burp Suite Enterprise with JIRA

Nikolay | Last updated: Jan 18, 2019 02:23AM UTC

Are there any example or docs on how to integrate with JIRA? The settings page has a URL, email address, and token fields, but can this be used with an onsite JIRA installation? JIRA API allows for basic auth too (Authorization: Basic username:password), is this form of authentication available too?

PortSwigger Agent | Last updated: Jan 18, 2019 10:50AM UTC

We don't currently have a JIRA guide, although we intend to produce one in future. For onsite JIRA installations you can put the password in the API token field within Burp. The API token method uses basic auth under the hood.

Burp User | Last updated: Jan 23, 2019 06:37AM UTC

I tried different combinations, but it doesn't seem to work. (password, username:password, base64_encoded username:password, etc.). Always results in 404 on JIRA's side. What is the URL that Burp uses to test connectivity with JIRA? Currently using 'https://jira.host/rest/api/2/issue/' as JIRA base URL, also tried several variations (/rest/api/, etc.)

PortSwigger Agent | Last updated: Jan 23, 2019 10:09AM UTC

Unfortunately, we've now realized that the current integration won't work with JIRA Server. It uses a different API version than JIRA Cloud. So this will require some work on our end. One of the developers has started looking at this.

Burp User | Last updated: Feb 14, 2019 04:20PM UTC

Any update on this to work in Jira Server ?

PortSwigger Agent | Last updated: Feb 14, 2019 04:24PM UTC

I believe it's going to acceptance testing tomorrow. I can't give you an ETA for a release.

Burp User | Last updated: Feb 22, 2019 02:19PM UTC

Hi, by the way what features does this integration give? We are interested in it.

PortSwigger Agent | Last updated: Feb 22, 2019 02:28PM UTC

The initial version lets you link a Jira instance and do one-click creation of issues. A future revision is going to automatically create Jira stories when there is a new issue or regression.

Liam, PortSwigger Agent | Last updated: Mar 14, 2019 02:06PM UTC

We've added support for Jira Server in the latest release of Burp Enterprise (1.0.14beta).

Rose, PortSwigger Agent | Last updated: Mar 14, 2019 02:07PM UTC

We have a lot of a plans for the improvement of Jira integration within Burp Enterprise. Do you have any specific requests?

Burp User | Last updated: May 21, 2019 06:16AM UTC

Thank you, it seems to work well with our internal deployment (although more flexible configuration would be appreciated).

Burp User | Last updated: Jun 24, 2019 04:17PM UTC

Do you have a road-map you could make public of your plans for JIRA integration? JIRA integrations are severely lacking in on-premise DAST solutions.

Rose, PortSwigger Agent | Last updated: Jun 25, 2019 10:26AM UTC

We don't have a road-map we can make public at the moment, but we can give you an indication of some of our upcoming plans: Supporting multiple Jira integrations Adding ability to assign Jira projects at folder/site level Allowing users to close Jira tickets If you have any specific requests, we'd be really happy to hear them.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.