Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Content Discovery make it more clear what has been discovered

Wouter | Last updated: Mar 28, 2018 07:11PM UTC

I my opinion it is not clear at all what has been discovered using the Content Discovery functionality. Please make it clear in the sitemap what exactly has been discovered. Perhaps you guys could simply add an extra column in the table with the requests? Or am I missing something here?

PortSwigger Agent | Last updated: Mar 29, 2018 09:58AM UTC

Hi Wouter, Within the Content Discovery window there is a Site map tab that shows what has been discovered in that session. Your suggestion of having another column within the main site map is an interesting idea. I'll have a discussion with my colleagues about this; it's something we may look at in future.

PortSwigger Agent | Last updated: Mar 29, 2018 10:01AM UTC

Hi Wouter, Understood. I think in time we will be upgrading the site map to display more information. When we do we will try to incorporate your use case. In the meantime, I have coded this extension for you. Please give it a try and let me know how you get on: - https://github.com/pajswigger/highlight-discovered-content

Burp User | Last updated: Apr 02, 2018 04:37PM UTC

Yes, I know the sitemap tab shows what has been discovered. However, in big projects it is simply not clear enough what has been added, and what was already there.

Burp User | Last updated: Apr 20, 2018 09:09AM UTC

Awesome, thank you!

PortSwigger Agent | Last updated: Apr 20, 2018 09:17AM UTC

Hi Wout, The extension will highlight items in the site map discovered by content discovery. This is how it looks on mine: - https://pasteboard.co/HhVepmn.png

Burp User | Last updated: Apr 20, 2018 09:40AM UTC

Hi Paul, I've tested the plugin. It does not seem to highlight discovered items. Filtering on "highlighted items" does not display any results. Can you describe what I should be looking for, perhaps I'm missing something.

Burp User | Last updated: Apr 25, 2018 03:36PM UTC

The discovered items are not highlighted like in your image... Seems like it isn't working. Any ideas?

PortSwigger Agent | Last updated: Apr 26, 2018 08:54AM UTC

Hi Wouter, My hunch is that those items are being discovered by some means other than content discovery. Can you check on a small site where you're absolutely sure that content discovery is finding something? You may want to turn off "Passively spider as your browse" in Spider > Options > Passive Spidering. Failing that, there must be some bug in the extension, although it's really hard to debug it as it works ok for me.

Burp User | Last updated: May 09, 2018 07:52PM UTC

I've tested it as you've suggested. I'm sure it is not working. I hope you can fix the bug!

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.