Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Issue object also record the original HTTP Message(base request and response)

bit4woo | Last updated: Jun 03, 2018 02:32AM UTC

Hi Team, Hope Issue object also record the original HTTP Message(base request and response) when record the HTTP messages on the basis of which the issue was generated. why I need this? I want to write a extender that can re-test specified issue (as descripted here: https://support.portswigger.net/customer/portal/questions/14466803-re-run-specific-scanner-checks) . it's need to get the base request of specified issue. I have go through the APIs, but haven't find any method to get it. that's the reason. thanks!

PortSwigger Agent | Last updated: Jun 04, 2018 07:26AM UTC

Unfortunately, the extender API does not provide access from a scan issue to the base request. That's something we may add in the future. In the meantime, there's a couple of approaches you could take. You have issue request; you could extract the URL and POST details, and search the site map for a similar request. Alternatively, if the IHttpRequestResponse object is an instance of IHttpRequestResponseWithMarkers, you could cast it and extract the marker positions. You could then replace the payload with some suitable base value, and use that as the base request. For retesting issues you may find the Replicator extension useful. It's in the BApp Store: - https://portswigger.net/bappstore/56cf924977874104ac35e52962a9a553

Burp User | Last updated: Jun 20, 2018 03:57AM UTC

Hi Paul, Thanks for your reply. I have tried to use the Replicator extension. but I think that's not what I wanted. in my opinion, I want to imply "On key retest". Just select issues and right click ,chose "rescan" to do that. So, I still hope to add this function: let issue object record original HTTP Message(base request and response) . thanks.

PortSwigger Agent | Last updated: Jun 20, 2018 08:56AM UTC