Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Can I get snipped requests/responses in XML reports?

Xavi | Last updated: Dec 12, 2018 09:47AM UTC

Hi, my name is Xavi. I am one of the maintainers of the Dradis Burp Importer plugin: https://github.com/dradis/dradis-burp We noticed that when Burp exports an HTML report, in the "Request" and "Response" fields it just shows the relevant parts of the HTTP request/response, using "[SNIP]" to hide the undesired parts (see https://portswigger.net/burp/samplereport/burpscannersamplereport) But when we export in XML format, we see the whole http code, no "[SNIP]" at all. Is there something I am missing when exporting in XML format that would allow me to see those "[SNIP]" to hide undesired parts in request/response fields? If it is not possible, we are considering using the HTML report. But then another question arises: Is there any way to know the version of the exported HTML report (like a meta tag or similar), so we can detect format changes in the future? Thanks!

PortSwigger Agent | Last updated: Dec 12, 2018 11:08AM UTC

Unfortunately, that output is not available in the XML report. There isn't an official way to determine the HTML output version, although it has not changed in some time, and you could use a hash of the header to check. The REST API returns scan data in JSON format and it does have the [SNIP] sections.

Mohamed | Last updated: Dec 16, 2023 05:43AM UTC

How to call REST API ? How can i get the full data without "...SNIP.." Thank you

Michelle, PortSwigger Agent | Last updated: Dec 18, 2023 10:43AM UTC

Hi Can you tell us more about how you want to use Burp and what you need to achieve? Are you starting scans using the REST API and trying to get the information on issues found? What format do you need this in? Is there a reason for using the REST API rather than the UI to get reports?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.