Burp Suite

PlexTrac supports importing HTML and XML files from Burp Suite Professional and Burp Suite Community product offerings. Burp Suite is a software tool for web application security testing that helps security professionals and developers identify and exploit security vulnerabilities.

Responses will be trimmed if HTML is used.

Below are the mappings of fields and any reference notes to provide context. If a field is not listed, PlexTrac does not currently import it.

Finding Field Mappings

If a field is not listed, PlexTrac does not currently import it.

PlexTrac Field	Burp Path	Notes
Finding Title	issue/name
Severity	issue/severity	maps "Information" to "Informational"
References	issue/vulnerabilityClassifications	removes the chars
References	references
Finding Description	issue/issueBackground
Evidence	issue/issueDetail
Finding Status	"Open"
Recommendations	remediationBackground
CWE ID	vulnerabilityClassifications

Asset Field Mappings

PlexTrac Field	Burp Path
Asset	issue/path
Hostname	https://issue/path
Known IP Addresses	issue/host@ip
Evidence	issue/requestresponse/request
	issue/requestresponse/response
Vulnerable Parameters	vulnerableParameters

Please note that vulnerable parameters vary based on the URL.

PlexTrac users will now see additional path details on Asset names and asset metadata fields, ensuring findings are accurately communicated for unique web app assets.

Parent Asset Field Mappings

PlexTrac Field	Burp Path
Asset	issue/host/path
Hostname	issue/path
Known IP Addresses	issue/host@ip

Additional Information

• Burp Suite Professional

• Burp Suite Community

• Burp Suite Documentation