NAME
Burpsuite::Parser - Parse Burpsuite scan data with Perl
VERSION
This document describes Burpsuite::Parser version .01
SYNOPSIS
my
$bpx
= new Burpsuite::Parser;
my
$parser
=
$bpx
->parse_file(
'test1.xml'
);
#a Burpsuite::Parser Object
my
@results
=
$parser
->get_all_issues();
#an Array of Burpsuite::Parser::Issue Objects
foreach
my
$h
(
@results
) {
"Type: "
.
$h
->type .
"\n"
;
"Serial: "
.
$h
->serial_number .
"\n"
;
"Severity: "
.
$h
->severity .
"\n"
;
"Host: "
.
$h
->host .
"\n"
;
"Name: "
.
$h
->name .
"\n"
;
"Location: "
.
$h
->location .
"\n"
;
"Path: "
.
$h
->path .
"\n"
;
"Issue Background: "
.
$h
->issue_background .
"\n"
;
"Remediation Background: "
.
$h
->remediation_background .
"\n"
;
"Issue Detail: "
.
$h
->issue_detail .
"\n"
;
}
DESCRIPTION
OVERVIEW
The main idea behind the core modules is, you will first parse the scan data then extract the information. Therefore, you should run parse_file or parse_scan then the you can use any of the methods.
- parse_file($xml_file)
-
Parse a Burpsuite XML file. The XML files are generated from using the: Burpsuite.pl --xml=file output.xml $IP
- get_session()
-
Obtain the Burpsuite::Parser::Session object which contains the session scan information.
- get_all_issues()
-
Obtain an Array of Burpsuite::Parser::Issue objects which contains information about the web applications being tested.
Burpsuite::Parser::Issue
This object contains the information for each of the issues found using Burpsuite.
- type()
-
Returns a number representing the type of issue found. Example SQL Injection or Cross-Site Scripting.
- serial_number()
-
Returns the serial number of each issue found. This is a unique identifer for each issue.
- path()
-
Returns the path of the issue found.
- host()
-
Returns the hostname that the issue was found on.
- severity()
-
Returns the severty of the issue found.
- issue_background()
-
Returns some background information of the issue found.
- remediation_background()
-
Returns some remediation information of the issue found.
- issue_detail()
-
Returns the technical details of the issue found.
SEE ALSO
Burpsuite, XML::LibXML and Object::InsideOut
AUTHOR
Joshua "Jabra" Abraham, <jabra AT spl0it DOT org>
COPYRIGHT AND LICENSE
Copyright 2009 Joshua D. Abraham. All rights reserved.
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.