The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

How to get Live Task result using Montoya

thanhpt | Last updated: Oct 10, 2023 02:49PM UTC

Hello, I am trying to develop a Burp Suite extension using new Montoya API. Also I create a Live Task that run Active Scan on requests that go through Proxy. But I can not find the library or Interface of Montoyal to get issue that is generated from Live Task.

Hannah, PortSwigger Agent | Last updated: Oct 11, 2023 08:42AM UTC

Hi When you create your Audit task using the Montoya API, you should get a reference to the Audit object. You can retrieve a list of found issues from this task by using "Audit.issues()". If you're looking to retrieve issues found across the whole of your Burp project, then you would want to use "SiteMap.issues()". Please let us know if you need any further assistance.

thanhpt | Last updated: Oct 19, 2023 08:27AM UTC

Is it possible to create a Live Task from Montoya ? It would be great because I run Burp in commandline mode that constantly log request through Burp Proxy.

Hannah, PortSwigger Agent | Last updated: Oct 19, 2023 09:12AM UTC

The type of task that extensions generate when adding an item to an Audit is similar to a live task. However, you will need to programmatically add your requests to this task, as it will not automatically add requests like a live task does.

thanhpt | Last updated: Oct 24, 2023 07:29AM UTC

I managed to create a Task to scan inserted requests. I also create a custom Audit Config from GUI and export to JSON. But I could not find a way to select or import my Audit Config from Montoya

Hannah, PortSwigger Agent | Last updated: Oct 24, 2023 09:18AM UTC

Hi You are not able to provide an extension-generated task with a scan configuration. It will run with the default parameters set.

thanhpt | Last updated: Oct 31, 2023 09:58AM UTC

May I ask which default scan config that Burp use when create task using Montoyal? Is it inside list built-in config?

Hannah, PortSwigger Agent | Last updated: Oct 31, 2023 10:16AM UTC