Burp community forum

Highlighting in extension-generated IScanIssue instances

dnet | Last updated: Mar 18, 2016 01:05PM UTC

Built-in scanner issues can apply highlight to both requests and responses, however I don't see any API to do so in IScanIssue instances generated by extensions. The method getHttpMessages() returns an array of IHttpRequestResponse instances, but that only has a get/setHighlight() used for color highlighting, not the positional highlights used by built-in scan issues. Am I missing something? Can this be done from an extension? If not, do you have a timeframe when it could be made available?

PortSwigger Agent | Last updated: Mar 18, 2016 01:14PM UTC

You can report custom scan issues with highlights using the existing API. You need to make your scan issue return instances of IHttpRequestResponseWithMarkers for the request/response items that you want to highlight. If you do this, Burp will use the markers provided by your extension when showing the custom issues in the UI.

Burp User | Last updated: Mar 18, 2016 01:25PM UTC

Thanks!

You need to Log in to post a reply. Or register here, for free.