Burpsuite::Parser - Parse Burpsuite scan data with Perl

This document describes Burpsuite::Parser version .01

 my $bpx = new Burpsuite::Parser;

 my $parser = $bpx->parse_file('test1.xml');
    #a Burpsuite::Parser Object

 my @results = $parser->get_all_issues();
    #an Array of Burpsuite::Parser::Issue Objects

 foreach my $h ( @results ) {
    print "Type: " . $h->type . "\n";
    print "Serial: " . $h->serial_number . "\n";
    print "Severity: " . $h->severity . "\n";
    print "Host: " . $h->host . "\n";
    print "Name: " . $h->name . "\n";
    print "Location: " . $h->location . "\n";
    print "Path: " . $h->path . "\n";
    print "Issue Background: " . $h->issue_background . "\n";
    print "Remediation Background: " . $h->remediation_background . "\n";
    print "Issue Detail: " . $h->issue_detail . "\n";
 }

 

The main idea behind the core modules is, you will first parse the scan data then extract the information. Therefore, you should run parse_file or parse_scan then the you can use any of the methods.

parse_file($xml_file)

Parse a Burpsuite XML file. The XML files are generated from using the: Burpsuite.pl --xml=file output.xml $IP

get_session()

Obtain the Burpsuite::Parser::Session object which contains the session scan information.

get_all_issues()

Obtain an Array of Burpsuite::Parser::Issue objects which contains information about the web applications being tested.

This object contains the information for each of the issues found using Burpsuite.

type()

Returns a number representing the type of issue found. Example SQL Injection or Cross-Site Scripting.

serial_number()

Returns the serial number of each issue found. This is a unique identifer for each issue.

path()

Returns the path of the issue found.

host()

Returns the hostname that the issue was found on.

severity()

Returns the severty of the issue found.

issue_background()

Returns some background information of the issue found.

remediation_background()

Returns some remediation information of the issue found.

issue_detail()

Returns the technical details of the issue found.

 Burpsuite, XML::LibXML and Object::InsideOut

Joshua "Jabra" Abraham, <jabra AT spl0it DOT org>

Copyright 2009 Joshua D. Abraham. All rights reserved.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.