Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

The type element in the XML report

idimio | Last updated: Jun 21, 2018 09:03PM UTC

From manual about Reporting: >> The type element contains an integer that uniquely identifies the issue type (SQL injection, XSS, etc.) For example, for SQL injection Type index is 0x00100200 (from here: https://portswigger.net/kb/issues) Why in the XML report is using different index (1049088 for SQL inj) and where I can get this index for other types of vulnerabilities? <issues burpVersion="1.7.33" exportTime="Thu Jun 21 22:40:05 MSK 2018"> <issue> <serialNumber>591273973816218864</serialNumber> <type>1049088</type> <name><![CDATA[SQL injection]]></name>

PortSwigger Agent | Last updated: Jun 22, 2018 10:15AM UTC

Hi Idimio, The type is a decimal value. If you convert that to hex you'll get the type index you're familiar with: >>> hex(1049088) '0x100200' This was quite surprising to me; perhaps we should use the hex value.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.