Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Highlighting in extension-generated IScanIssue instances

Veres-Szentkirályi | Last updated: Mar 18, 2016 01:05PM UTC

Built-in scanner issues can apply highlight to both requests and responses, however I don't see any API to do so in IScanIssue instances generated by extensions. The method getHttpMessages() returns an array of IHttpRequestResponse instances, but that only has a get/setHighlight() used for color highlighting, not the positional highlights used by built-in scan issues. Am I missing something? Can this be done from an extension? If not, do you have a timeframe when it could be made available?

PortSwigger Agent | Last updated: Mar 18, 2016 01:14PM UTC

You can report custom scan issues with highlights using the existing API. You need to make your scan issue return instances of IHttpRequestResponseWithMarkers for the request/response items that you want to highlight. If you do this, Burp will use the markers provided by your extension when showing the custom issues in the UI.

Burp User | Last updated: Mar 18, 2016 01:25PM UTC

Thanks!

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.