Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

IScanIssue vs. IBurpCollaboratorInteraction

dnet | Last updated: Dec 29, 2016 08:21PM UTC

Now that Extender plugins can use collaborator, it can be used to identify issues. The built-in active scanner can use this to attach the relevant interactions to the reported issue. Based on the IScanIssue interface, I can see no such method to implement for Extender plugins. Am I looking at the wrong place?

PortSwigger Agent | Last updated: Jan 03, 2017 10:22AM UTC

There isn't currently a way to directly attach IBurpCollaboratorInteraction objects to extension-generated IScanIssue objects. The best approach is to describe the observed interaction within the issue detail wording that you do control. This is the approach taken by the HTTPoxy extension that we created in the BApp Store: https://portswigger.net/bappstore/ShowBappDetails.aspx?uuid=9c9877825cbd428bab27a25d0ea17178 https://github.com/PortSwigger/HTTPoxy

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.