Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

[Burp Enterprise GraphQL API] Sort Issues in scans

Romain | Last updated: Apr 15, 2022 09:08AM UTC

Hi, I'm working with the Burp Enterprise Graphql API, and I can't figure out how to do proper pagination on the Issues returned by a Scan. I use the following GraphQL call, with a page size of 1 for the sake of convenience during my tests, incrementing $page_start between each call: query GetScan { scan(id: $scan_id) { issues(start: $page_start, count: 1) { issue_type { .... However, it seems that the Issues returned are not ordered. I get multiple times the same Issue on different pages, and on different runs, the order of the issues is not the same. For instance : === First run === Page 0 - Issue serial 92639775333607424 Page 1 - Issue serial 7689065262900864000 Page 2 - Issue serial 7689065262900864000 # Same as previous Page 3 - Issue serial 8701935087154101248 Page 4 - Issue serial 1507807135894054912 Page 5 - Issue serial 6617076074493159424 Page 6 - Issue serial 763655839614044160 Page 7 - Issue serial 5540024947585468416 Page 8 - Issue serial 765857779229686784 Page 9 - Issue serial 5540024947585468416 # Same as previous Page 10 - Issue serial 1380808651145403392 ... === Second run === Page 0 - Issue serial 92639775333607424 Page 1 - Issue serial 65390855754575872 Page 2 - Issue serial 7689065262900864000 Page 3 - Issue serial 8701935087154101248 Page 4 - Issue serial 1507807135894054912 Page 5 - Issue serial 6617076074493159424 Page 6 - Issue serial 763655839614044160 Page 7 - Issue serial 1380808651145403392 Page 8 - Issue serial 765857779229686784 Page 9 - Issue serial 765857779229686784 Page 10 - Issue serial 765857779229686784 ... Is there a way to properly order the Issues returned by a Scan, so a proper pagination can be made? According to the documentation (https://portswigger.net/burp/extensibility/enterprise/graphql-api/scan.html), it seems that we can't order the Issues: issues(type_index: ID, start: Int!, count: Int!, severities: [Severity], confidences: [Confidence], novelties: [Novelty]): [Issue!] Please also note that with a page size bigger than the number of Issues, I don't get duplicates, but the order is different between each run. Thank you very much!

Uthman, PortSwigger Agent | Last updated: Apr 15, 2022 12:45PM UTC