Setting comments on Turbo Intruder request/response objects

[SafeEval]

Comments set for request/response rows in Proxy and Intruder persist across tools, including plugins like Logger++. I'm trying to programmatically do the same from Turbo Intruder scripts, using BurpRequest.setComment().

I dug into Turbo Intruder's code, to expose this functionality to Python without success.

• I found that BurpRequest.setComment() is an empty method. (source)
• A few places in the Java/Kotlin code make use of IHttpRequestResponse objects, so I tried calling setComment with a string literal as a test to see if anything stuck, without luck (MessageController, TurboScanIssue)

I understand that you cannot provide indefinite support, and am willing to take a stab at implementing this. How might I go about wiring up BurpRequest.setComment() so that comments are persisted?

[albinowax]

You could try just adding a comment attribute to BurpRequest and implementing the getter/setter but I'm not sure this would work.

[SafeEval]

Thanks for the suggestion. I tried a few approaches and found one that works, without needing to modify Turbo Intruder itself. It's verbose, but functional.

I registered a new IHttpListener, then exposed the IHttpRequestResponse being passed through the listener to other functions in the script. A PoC can be found here: poc-turbo-intruder-messageinfo-comment.py