Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Burp Extension/API DOM Checks

Ryan | Last updated: May 24, 2023 04:39PM UTC

When Burp performs DOM-based scanning, is it possible to utilize the API to extend the scanning to identify custom issues? For example, looking for the presence of certain content in the built DOM?

Hannah, PortSwigger Agent | Last updated: May 26, 2023 12:27PM UTC

Hi Are you referring to adding additional scan checks? If so, you can find an example of an extension that provides an additional scan check here: https://github.com/PortSwigger/burp-extensions-montoya-api-examples/tree/main/customscanchecks Our Montoya API documentation can be found here: https://portswigger.net/burp/documentation/desktop/extensions/creating

Ryan | Last updated: Jul 13, 2023 02:59PM UTC

Hi Hannah, thank you for the response, but I will have to clarify. My understanding is that Burp's scanner uses the built-in browser to render the DOM and perform DOM-level actions as part of the scan. I am curious if it would be possible to interact with this browser component using the API to access elements of the DOM during a scan.

Hannah, PortSwigger Agent | Last updated: Jul 17, 2023 01:12PM UTC