burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
Security Assessment
Detected risks:
About burpsuite-project-parser
The burpsuite-project-parser skill provides a command-line workflow for searching and extracting information from Burp Suite project files (.burp) by leveraging Burp Suite Professional and the burpsuite-project-file-parser extension. Instead of manually navigating Burp Suite’s graphical interface, users can query captured HTTP traffic, response headers, request bodies, site map entries, and audit-related data directly from the terminal. The skill is designed to streamline large-scale analysis of Burp project data while minimizing the risk of loading excessively large datasets into the working context.
The skill focuses on efficient and targeted extraction of Burp project components through predefined sub-component filters. It supports searching response headers and bodies using regex patterns, reviewing proxy history and site map data, and extracting security-relevant findings from captured traffic. The documentation strongly emphasizes safe handling of large response bodies by enforcing truncation rules and recommending header-focused workflows before selectively retrieving body content. Wrapper scripts and environment-variable-based configuration improve portability across different systems and Java installations.
This skill is intended for security professionals, penetration testers, application security engineers, and researchers who regularly work with Burp Suite project files. It is particularly useful during web application assessments, HTTP traffic investigations, vulnerability research, and large-scale review of captured requests and responses. Teams that need automated or scriptable access to Burp project data can use this skill to efficiently filter and analyze traffic without performing full data exports or manual inspection in the Burp UI.
FAQ
Does this skill parse .burp files directly?
No. The skill delegates parsing to Burp Suite Professional using the burpsuite-project-file-parser extension.
What software is required to use this skill?
You must have Burp Suite Professional installed along with the burpsuite-project-file-parser extension loaded through the Burp Extender interface.
Why are sub-component filters recommended instead of full dumps?
Full proxyHistory or siteMap exports can contain gigabytes of data. Sub-component filters allow users to retrieve only specific request or response sections, reducing memory usage and improving performance.
Can response bodies be extracted and searched?
Yes, response bodies can be searched with regex patterns, but body content must always be truncated to 1000 characters maximum before entering context.
How does the skill improve command-line compatibility across platforms?
The wrapper script uses environment variables such as BURP_JAVA and BURP_JAR so users can configure Java and Burp Suite paths consistently across different operating systems.
Install burpsuite-project-parser
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
trailofbits/skills