Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Image RemovedImage Added

📙 You will learn

How to generate a Burp Suite report and upload it to ThreadFix.

Prerequisites

Audience: IT Professional
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A

Generate Results

  1. After launching BURP Suite Professional, there are three options for obtaining results to generate a report. Select any of the available options below:

    • Temporary project

    • New project on disk

    • Open existing project

  2. Select Use Burp defaults and select Start Burp:

  3. Select the Proxy tab and select the Options tab. Make sure the Proxy is running:


  4. Open Chrome and set the proxy through the settings tab. Set the port to the one used in BURP:

  5. Select Intercept tab and set turn the Interceptor off:

  6. Navigate to the Target in Chrome, select the Target tab and then select the URL in Burp:

    1. Run the Spider

    2. Run the Actively scan this host

    3. Run the Passively scan this host

  7. Select the findings in the Issues Pane and select Report selected issues:


  8. Select XML for the report format and check the Base64 box below it:


  9. Select Next until the wizards asks to save the file and save it to the desired directory:

Upload Results

  1. After generating the report, log in to ThreadFix and navigate to the Teams tabthe Teams view, within the Portfolio page. Expand the Team that the report will be uploaded to:.

    Image RemovedImage Added

  2. After picking one of the Team's Application, select Upload Scan and drag the report into the Pane:
    Image Removed

    Image Added

  3. Once ThreadFix has finish processing the report, the results can be viewed on the Application's pageview:

    Image RemovedImage Added

Table of Contents

Table of Contents