Active developement & api

[CappuccinoCake]

Good morning, my question is, is burp under active developement, or is it dead? And if under active developement, is there the possibility for the team to implement some simple api logic, that someone via a simple script can query some backup information about the hosts?

If you have further questions, please ask me.

Thanks.
Patrick.

[grke]

Hello,

I am still here, though less active on this project than in previous years.

Burp already has a "status monitor" port that you can configure on the server.
You can send it text, and it will reply in JSON format.

More information here, and in the man page
https://burp.grke.org/docs/monitor.html

[CappuccinoCake]

what do you mean? I can send text via some raw socket and then I get the json back? Or do i have to use the burp -a m thing and then pipe something to stdin via code? I want to integrate burp to my monitoring, and there i need to query burp for info.

Thanks.
Patrick.

[grke]

Hello,

I'm sorry that my first response was confusing/inaccurate. I will try again:

You asked for the possibility of having "a simple script can query some backup information about the hosts".

You can configure the burp server to listen on a special "status port".
But to talk to the "status port", you need to speak SSL, and the burp protocol.

You can configure and use the burp client (ie, the "burp -a m" thing) to do this, because it speaks SSL and the burp protocol, and it will use the same SSL certificates that the normal burp client uses to do backups/restores. Although it can be configured differently to have it's own entirely separate certificates if you want.

Once set up, the "burp -a m" thing will connect to the server and you can give it commands on stdin, and it will give you JSON responses on stdout.
So, you should be able to write yourself a simple script that can run a "burp -a m" process and query it.