Burp Suite User Forum

Login to post

Extender callback for getting the currently active project's name

xx | Last updated: Nov 18, 2021 10:08AM UTC

Hello! Maybe I'm blind, but I can't find in the documentation a callback for getting the currently active project's name (set during project set up). I thought of parsing the output of saveConfigAsJson(), but it's not in there either. What is the canonical method of getting the active project's name?

Hannah, PortSwigger Agent | Last updated: Nov 19, 2021 05:23PM UTC

Hi There isn't a way to do this in the API documentation. However, the extension "Sharpener" has a method to override the text in the title bar of your Burp - you could check out how he got to the text in the first place by looking at the source code? You can find this here: https://github.com/PortSwigger/sharpener All BApp Store extensions have their code publicly available on GitHub here: https://github.com/PortSwigger

xx | Last updated: Nov 22, 2021 07:30AM UTC

Seems quite hacky - getting the title from UI elements and parsing the project name from there. As per your suggestion, I'll be doing that, but it seems like it could break at any moment. Is there no possibility of adding this functionality to the API? Seems relatively easy to implement. My extension pushes requests and responses to ElasticSearch, and it would be great if I could identify requests/responses by the project they're tied to.

Hannah, PortSwigger Agent | Last updated: Nov 22, 2021 11:07AM UTC

We can raise a feature request for this functionality. We'll be looking at making some changes to the Extender API in the next year.

Have you had a look at the existing BApp Store extension, Report To Elastic Search? That extension seems to use some logic to determine whether an issue has been raised by the same scan or not.

If you wanted to identify issues on a project level basis, you could store a fake item in the sitemap containing a UUID - that would mean that if the fake item is there, it's an existing project, and if it isn't then it's a new project.

An existing BApp Store author has a GitHub repo containing different utilities that he uses - I believe this particular one is found here.

You need to Log in to post a reply. Or register here, for free.