burpsuite-project-parser

Solid

Use when asked to search or analyze a Burp Suite .burp project to extract audit items, inspect request or response metadata, or search captured traffic. Reads through Burp Suite Professional headless JAR, preflights result size, and returns size-checked JSON with truncated body fields. Findings are indicators requiring validation.

Data & Documents 52 stars 9 forks Updated 5 days ago Apache-2.0

Install

View on GitHub

Quality Score: 83/100

Stars 20%
57
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Burp Suite project parser ## Contract | Field | Bound contract | |---|---| | Trigger | A user asks to search or analyze a Burp Suite .burp project, extract audit items, inspect targeted request or response metadata, or search captured traffic. | | Authority | Read-only. No file, VCS, credential, paid, published, deployed, or remote mutation. The .burp project is read through Burp Suite Professional; no project file is modified. | | Side effect | The user-selected local .burp project is read through Burp Suite Professional, with output capped and filtered. | | Done | The requested operation returns relevant, size-checked JSON within record and byte limits, body fields are truncated to at most 1000 characters, and Burp findings are presented as indicators requiring validation rather than proof. | ## Inputs - Project file path (required): absolute path to a `.burp` project file. - Operation (required): one of `auditItems`, `proxyHistory`, `siteMap`, `responseHeader='regex'`, `responseBody='regex'`, or a sub-component filter such as `proxyHistory.request.headers`. - BURP_JAVA (required if not at default platform path): path to Burp Suite Professional's bundled Java executable. Defaults: macOS `/Applications/Burp Suite Professional.app/Contents/Resources/jre.bundle/Contents/Home/bin/java`; Linux `/opt/BurpSuiteProfessional/jre/bin/java`. - BURP_JAR (required if not at default platform path): path to `burpsuite_pro.jar`. Defaults: macOS `/Applications/Burp Suite Professional....

Details

Author
OutlineDriven
Repository
OutlineDriven/outline-driven-development
Created
9 months ago
Last Updated
5 days ago
Language
Python
License
Apache-2.0

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Solid

burp-search-command

Use when a human invokes the Burp search command with a required .burp project file and optional parser operation. Runs the Burp Suite project parser wrapper and returns JSON search results. Not for source or remote-system changes.

52 Updated 5 days ago
OutlineDriven
Data & Documents Listed

js-analysis

Analyze JavaScript files (from Burp/proxy history, a URL list, or a recon JS dump) for security-relevant intel — hidden admin/internal/debug/test API endpoints, hidden parameters (debug/test/admin/role/bypass flags), hardcoded secrets (API keys, tokens, passwords, private keys), feature flags that unlock hidden functionality, dangerous developer comments, and client-side auth/authz logic. Extracts, categorizes, prioritizes by exploitability, emits ready-to-fire validation requests (Burp Repeater / curl), and writes a findings report. Use when a target's front end ships JS bundles and you want to mine them for attack surface. Never reports a secret or endpoint without a live test first.

0 Updated 3 weeks ago
z3r0s6
Testing & QA Featured

burp-suite-testing

This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.

4,617 Updated today
zebbern