Method doPassiveScan

src/main/java/burp/PassiveScanner.java:31–47

(IHttpRequestResponse httpRequestResponse)

    }

    @Override
    public List<IScanIssue> doPassiveScan(IHttpRequestResponse httpRequestResponse) {
        URL httpRequestURL = BurpExtender.getHelpers().analyzeRequest(httpRequestResponse).getUrl();
        String requestUrl = CommonUtils.getUrlWithoutFilename(httpRequestURL);

        // 目前检测的查重是将 http://user:pass@host:port/deep/path/filename?query#fragment
        // 归一化为 http://host:port/deep/path 后检测是否扫描过, 如果未来有对 query 有相关检测需求, 可以在修改 Common.getUrlWithoutFilename

        if (this.scanedUrl.get(requestUrl) <= 0) {
            this.scanedUrl.add(requestUrl);
        } else {
            return null; // 检测到重复, 直接返回
        }

        ArrayList<ApiType> apiTypes = this.apiScanner.detect(httpRequestResponse, true);
        return this.parseApiDocument(apiTypes);
    }

    public List<IScanIssue> parseApiDocument(ArrayList<ApiType> apiTypes) {
        List<IScanIssue> issues = new ArrayList<>();