PortSwigger / burp-extensions-montoya-api

Burp Extensions Api
Other
139 stars 5 forks source link

audit.issues allways empty #52

Closed Kaide0521 closed 1 year ago

Kaide0521 commented 1 year ago

MontoyaApi version : 2023.2 burpsuite pro v2023.1.2

 Audit audit =
                LegacyBurpExtender.getInstance().getMontoyaApi().scanner().startAudit(AuditConfiguration.auditConfiguration(BuiltInAuditConfiguration.LEGACY_ACTIVE_AUDIT_CHECKS));
        for(HttpMessage info : submitTraffic){
            System.out.println(new String(info.getRequest()));
            audit.addRequest(HttpRequest.httpRequest(new String(info.getRequest())));
//            LegacyBurpExtender.getInstance().getCallbacks().doActiveScan("127.0.0.1",
//                    8080, false,
//                    info.getRequest());
        }
        while (!"finished".equals(audit.statusMessage())) {
            System.out.println(audit.statusMessage());
            System.out.println("audit.requestCount()" + audit.requestCount());
            System.out.println("audit.issues()" + audit.issues().size());
            List<AuditIssue> issues = LegacyBurpExtender.getInstance().getMontoyaApi().siteMap().issues();
            System.out.println("siteMap.issues()" + issues.size());
            Thread.sleep(5000);
        }
Hannah-PortSwigger commented 1 year ago

This was also reported in #9

We've added your +1 for this functionality. Unfortunately, this and the equivalent functionality in the legacy Extender API has always returned empty.

We would recommend retrieving issues from the Site Map instead.