Setup & Installation
npx skills add https://github.com/trailofbits/skills --skill burpsuite-project-parser
https://github.com/trailofbits/skills/tree/main/plugins/burpsuite-project-parser
View on GitHubWhat This Skill Does
Searches and extracts data from Burp Suite project files (.burp) via the command line. Supports regex search across response headers and bodies, extraction of audit findings with severity and confidence metadata, and structured access to proxy history and site map data.
Instead of manually clicking through Burp Suite's UI to find specific headers or findings, you can pipe .burp project data directly into jq filters and shell scripts for repeatable, scriptable analysis.
When to use it
- Searching proxy history response headers for specific server signatures or security headers
- Extracting high-severity audit findings from a .burp project file for triage
- Filtering site map traffic by URL pattern to scope an HTTP traffic review
- Running regex against response bodies to locate forms, tokens, or sensitive data patterns
- Dumping structured audit item data including severity, confidence, and affected URLs