burpsuite-project-parser
SolidUse when asked to search or analyze a Burp Suite .burp project to extract audit items, inspect request or response metadata, or search captured traffic. Reads through Burp Suite Professional headless JAR, preflights result size, and returns size-checked JSON with truncated body fields. Findings are indicators requiring validation.
Install
Quality Score: 84/100
Skill Content
Details
- Author
- OutlineDriven
- Repository
- OutlineDriven/outline-driven-development
- Created
- 10 months ago
- Last Updated
- today
- Language
- Python
- License
- Apache-2.0
Similar Skills
Semantically similar based on skill content — not just same category
burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
burp-search-command
Use when a human invokes the Burp search command with a required .burp project file and optional parser operation. Runs the Burp Suite project parser wrapper and returns JSON search results. Not for source or remote-system changes.
js-analysis
Analyze JavaScript files (from Burp/proxy history, a URL list, or a recon JS dump) for security-relevant intel — hidden admin/internal/debug/test API endpoints, hidden parameters (debug/test/admin/role/bypass flags), hardcoded secrets (API keys, tokens, passwords, private keys), feature flags that unlock hidden functionality, dangerous developer comments, and client-side auth/authz logic. Extracts, categorizes, prioritizes by exploitability, emits ready-to-fire validation requests (Burp Repeater / curl), and writes a findings report. Use when a target's front end ships JS bundles and you want to mine them for attack surface. Never reports a secret or endpoint without a live test first.