Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

headless xml report with

karun | Last updated: Aug 19, 2019 08:56AM UTC

Hi Guys, Looking for quick help how can we get an XML report with base64 as false <request method="GET" base64="false">. I mean I need request and response in plain text rather than base64 encoded. I ran burp in headless mode. java -jar -Xmx1g -Djava.awt.headless=true "C:\Program Files\BurpSuitePro\burpsuite_pro.jar" --config-file=burpprojectoptions1.json --project-file=project.burp -c config.xml confix.xml will have the below data: <?xml version="1.0" encoding="UTF-8"?> <config xmlns="http://nets.eu/burp/config"> <reportType>XML</reportType> <targetSitemap><![CDATA[http://[Host]/dvwa]]></targetSitemap> <scope> <url><![CDATA[http://[Host]/dvwa/]]></url> <exclusions> <!-- optional --> <exclusion><![CDATA[http://[Host]/dashboard/]]></exclusion> <exclusion><![CDATA[http://[Host]/phpmyadmin/]]></exclusion> </exclusions> </scope> </config>

Mike, PortSwigger Agent | Last updated: Aug 19, 2019 12:31PM UTC

Hi Karun, can you confirm that you are using the Headless Burp extension to perform this action? https://github.com/PortSwigger/headless-burp If so, unfortunately you will need to contact the author of that extension for technical support queries. In the Burp Suite UI, there is a checkbox option in the scan reporting wizard which can be found at the following location: Issue Activity > Report Issue > XML > Base64-encode requests and responses, which if disabled would give you the report contents in plain text format if you are able to access the UI.

Burp User | Last updated: Aug 19, 2019 01:22PM UTC

Hi Mike, Thank you for the response. Yeah I know about the UI part but do we have any option available in burp command line for xml reporting apart from headlessburp or carbonator?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.