Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Highlighting in extension-generated IScanIssue instances

Veres-Szentkirályi | Last updated: Mar 18, 2016 01:05PM UTC

Built-in scanner issues can apply highlight to both requests and responses, however I don't see any API to do so in IScanIssue instances generated by extensions. The method getHttpMessages() returns an array of IHttpRequestResponse instances, but that only has a get/setHighlight() used for color highlighting, not the positional highlights used by built-in scan issues. Am I missing something? Can this be done from an extension? If not, do you have a timeframe when it could be made available?

PortSwigger Agent | Last updated: Mar 18, 2016 01:14PM UTC

You can report custom scan issues with highlights using the existing API. You need to make your scan issue return instances of IHttpRequestResponseWithMarkers for the request/response items that you want to highlight. If you do this, Burp will use the markers provided by your extension when showing the custom issues in the UI.

Burp User | Last updated: Mar 18, 2016 01:25PM UTC