Exposed API calls to both authentication login from Burp API #19
Conversation
Replaced code changes for application_login api call 'UsernameAndPasswordLogin' with 'RecordedLogin'.
Update _burp_commander.py
Update _burp_commander.py
burpa/_burp_commander.py
Outdated
| username=username, password=password, | ||
| exclude_rules=exclude_rules, scan_configurations=scan_configurations) | ||
|
|
||
| if label and script: |
There was a problem hiding this comment.
| if label and script: | |
| elif label and script: |
| app_user=app_user, | ||
| app_pass=app_pass, | ||
| recorded_login_label=recorded_login_label, | ||
| recorded_login_script=recorded_login_script, |
There was a problem hiding this comment.
You need to read the recorded_login_script file before passing it to the _start_scan function.
To read a file one can use the open function.
|
Added API calls to recorded login script authentication login method, it works as expected. Updated code changes in utils.py, burpa.py and burp_commander.py files. Could you please verify from your end and confirm on this. burpa scan https://example.com/login --recorded_login_label=Login --recorded_login_script="Login.json" |
Please check this and confirm. |
|
Have you tried it on your end ? |
|
It cannot possibly be true, there is a syntax error :/ |
What syntax error you are getting? |
Added api call to recorded login script feature.