Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Can I get snipped requests/responses in XML reports?

Xavi | Last updated: Dec 12, 2018 09:47AM UTC

Hi, my name is Xavi. I am one of the maintainers of the Dradis Burp Importer plugin: https://github.com/dradis/dradis-burp We noticed that when Burp exports an HTML report, in the "Request" and "Response" fields it just shows the relevant parts of the HTTP request/response, using "[SNIP]" to hide the undesired parts (see https://portswigger.net/burp/samplereport/burpscannersamplereport) But when we export in XML format, we see the whole http code, no "[SNIP]" at all. Is there something I am missing when exporting in XML format that would allow me to see those "[SNIP]" to hide undesired parts in request/response fields? If it is not possible, we are considering using the HTML report. But then another question arises: Is there any way to know the version of the exported HTML report (like a meta tag or similar), so we can detect format changes in the future? Thanks!

PortSwigger Agent | Last updated: Dec 12, 2018 11:08AM UTC

Unfortunately, that output is not available in the XML report. There isn't an official way to determine the HTML output version, although it has not changed in some time, and you could use a hash of the header to check. The REST API returns scan data in JSON format and it does have the [SNIP] sections.

Mohamed | Last updated: Dec 16, 2023 05:43AM UTC

How to call REST API ? How can i get the full data without "...SNIP.." Thank you

Michelle, PortSwigger Agent | Last updated: Dec 18, 2023 10:43AM UTC