Empty scan findings

[wvdongen]

The sqlmapapi reported:
[23:23:09] [DEBUG] [9fb2cdda8d37dd3e] Retrieved scan data and error messages

Burp extender output reported:
Scan for task 9fb2cdda8d37dd3e completed. Gathering results.
If the page was vulnerable, then findings for task 9fb2cdda8d37dd3e have been reported.

[codewatchorg]

Is the tested page actually vulnerable? You can connect to the API and retrieve the log information with:
GET /scan/9fb2cdda8d37dd3e/log

If there were results, you can check with:
GET /scan/9fb2cdda8d37dd3e/data

My guess is that the scan completed successfully but that there were no results. If that is the case, I need to update the code to not add anything to the Burp scan results tab if the results are empty.

[codewatchorg]

Yeah, I just confirmed, it is adding a result even if the results were empty. Will work on a fix.

[codewatchorg]

I believe this is fixed now. If you run a scan and the page is not vulnerable to SQL injection, then nothing will be added to the Burp scanner results tab.

[wvdongen]

Just tested it, no more empty results present.

Thanks!