{"id":13845583,"url":"https://github.com/justmorpheus/burp-automation","last_synced_at":"2025-07-12T03:31:27.171Z","repository":{"id":47278983,"uuid":"395859749","full_name":"justmorpheus/burp-automation","owner":"justmorpheus","description":"Performing automated scan using Burp Suite Pro \u0026 Vmware Burp Rest API ","archived":false,"fork":false,"pushed_at":"2022-09-30T21:31:44.000Z","size":63241,"stargazers_count":48,"open_issues_count":0,"forks_count":13,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-08-05T17:44:57.138Z","etag":null,"topics":["hacktoberfest"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/justmorpheus.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-08-14T02:10:47.000Z","updated_at":"2024-07-12T09:35:45.000Z","dependencies_parsed_at":"2023-01-18T19:30:24.937Z","dependency_job_id":null,"html_url":"https://github.com/justmorpheus/burp-automation","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/justmorpheus%2Fburp-automation","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/justmorpheus%2Fburp-automation/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/justmorpheus%2Fburp-automation/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/justmorpheus%2Fburp-automation/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/justmorpheus","download_url":"https://codeload.github.com/justmorpheus/burp-automation/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225791368,"owners_count":17524771,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacktoberfest"],"created_at":"2024-08-04T17:03:29.249Z","updated_at":"2024-11-21T19:30:24.689Z","avatar_url":"https://github.com/justmorpheus.png","language":"Python","funding_links":["http://buymeacoffee.com/justmorpheus"],"categories":["Python"],"sub_categories":[],"readme":"# \u003ch1 align=\"center\" id=\"heading\"\u003eBurp\\`O\\`Mation\u003c/h1\u003e\n\u003ch2 align=\"center\" id=\"heading\"\u003e Performing automated scan using Burp Suite Pro \u0026amp; Vmware Burp Rest API with Robot Framework using Python3. \u003c/h3\u003e\n\n\u003cp align=\"center\"\u003e\n   \u003cimg alt=\"GCP Inspector\" src=\"https://i.ibb.co/p0QyJX0/burp-automation-2.png\" width=\"600\"/\u003e\n\u003c/p\u003e\n\n\n## Blog\n**Visit blog for detailed explanation of each step.**\n- [Explanation \u0026 Installation Blog](https://justm0rph3u5.medium.com/burp-automation-automating-burp-scanning-via-rest-api-robot-framework-using-python3-78aebdd35c53)\n\n## What it does\n- One click run using bash installs all the dependencies with verbose prerequisites.\n- Uses python3 and robot framework which is easy to automate.\n- Uses Burp Suite Rest API and runs Burp Suite Professional (pre-activated) in the headless mode along with multiple Burp Suite extension like additional-scanner-checks, BurpJSLinkFinder and active-scan-plus-plus.\n- Automatically performs pentest of API/Web endpoint including scope addition and deletion using robot script.\n- Automatically upload reports in CSV \u0026 HTML into Google Drive in YYYY-MM-DD format.\n- Slack integration for real time alerts.\n\n## Prerequisites (Pre-Setup).\n - **Run this before running automation.sh**\n - Debian OS(Ubuntu).\n - Activated Burp Suite Pro (burpsuite_pro_v2021.6.2.jar) with prefs.xml .\n - [Vmware Burp Suite Rest API](https://github.com/vmware/burp-rest-api) (It will be installed via automated script).\n - Python3 \u0026 Pip (It will be installed via automated script).\n - Robot Framework (It will be installed via automated script).\n - Update scope, slack webhook \u0026 Google Drive parent folder id in [custom_lib_2.py](https://github.com/justmorpheus/burp-automation/blob/master/custom_lib_2.py).\n - Setting up Google Drive authentication for [PyDrive](https://pythonhosted.org/PyDrive/quickstart.html)\n - Upload credentials (client_secrets.json \u0026 mycreds.txt) to GitHub repository for automation script.\n\n## Installation\n```\nmkdir automation\ncd automation\nwget https://raw.githubusercontent.com/justmorpheus/burp-automation/master/automation.sh\nchmod +x automation.sh\nbash automation.sh https://github.com/justmorpheus/burp-automation.git\n```\n\n## Usage\n`bash automation.sh https://github.com/justmorpheus/burp-automation.git`\n\n**In case of failure**\nRun the following command inside the folder `python3 -m robot -d output fuzzing.robot` .\n\n## Note\n- A big thanks to [we45](https://we45.com/blog/automating-burp-with-jenkins/), for showing this awesome work.\n- This is for educational purpose as [Burp Suite](https://portswigger.net/burp/enterprise) is having enterprise license for running it in CI/CD.\n- Do not use this in production, this is for learning and understanding Burp Suite Automation.\n- Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.\n\n## Reference\n- https://we45.com/blog/automating-burp-with-jenkins/\n- https://burpsuite.guide/blog/activate-burpsuite-inside-docker-container/\n- https://portswigger.net/burp\n- https://github.com/vmware/burp-rest-api\n\n\n[![\"Buy Me A Coffee\"](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png)](http://buymeacoffee.com/justmorpheus)\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjustmorpheus%2Fburp-automation","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjustmorpheus%2Fburp-automation","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjustmorpheus%2Fburp-automation/lists"}