Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Problem with IScanIssue getHttpMessages()

Jeremy | Last updated: Aug 06, 2016 12:33AM UTC

I have users reporting issues with an extension that was working fine in 1.6x but is having a problem in 1.7.04 (I did not try with any earlier 1.7x release). The root cause is that the IScanIssue getHttpMessages() method appears to always return an empty array. Is this a known issue? I have a simple extension that can reproduce the problem if you would like to see how I am using the IScanIssue interface. Thank you!

PortSwigger Agent | Last updated: Aug 08, 2016 10:03AM UTC

Thanks for this report. We've reproduced a problem with this API. For some issue types/instances, some of the requests/responses within the actual issue are not included in the array that is returned by this method. We haven't seen it always returning an empty array, but you might observe this if all the issues you tested on happened to have the problem. We'll investigate the cause of this and aim to get it fixed in the next update. If you're able to share your extension code that illustrates what you observed, that would also be helpful in making sure we've covered off all cases, thanks.

Burp User | Last updated: Aug 08, 2016 01:14PM UTC

Thank you for confirming the issue. I will send an email to your support address with additional information.

PortSwigger Agent | Last updated: Aug 09, 2016 09:50AM UTC

Just to let you know that this issue should now be resolved in the latest Burp release. Thanks again for your feedback and do let us know if you run into any other problems.

Burp User | Last updated: Oct 10, 2016 06:53PM UTC

I've tried the 1.7.07 release. The issue seems to be resolved for me. Thank you!

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.