PortSwigger / BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition
https://portswigger.net/burp/documentation/scanner/bchecks
GNU Lesser General Public License v3.0
619 stars 109 forks source link

Regex match retrieval #79

Open Sim4n6 opened 1 year ago

Sim4n6 commented 1 year ago

Hi,

I was wondering if there is a way when a match is being done using regex to retrieve that value.

Thank you

Hannah-PortSwigger commented 1 year ago

Thanks for the feedback. It is not currently possible to retrieve the value of the regular expression. You can use it to evaluate an expression, or replace text that matches your regex.

Are you able to provide some more information on how you are trying to use this functionality? We may be able to suggest a workaround for you.

Sim4n6 commented 1 year ago

I wanna extract emails identified by a regex. It is that simple. In the report issue part , I dont' know how to extract that.

Hannah-PortSwigger commented 1 year ago

Thanks for the feedback! It's not possible to extract this value. However, you should find that the relevant portion is highlighted in the attached request and response for the issue. We've noted down your interest in this functionality.

We do have built-in scan checks for email addresses - you can find this detailed here: https://portswigger.net/kb/issues/00600200_email-addresses-disclosed

Hannah-PortSwigger commented 1 year ago

Reopening for better tracking of this feature request.