burp-extension-generator

Name: burp-extension-generator
Availability: InStock
Author: dmbs335

Generate Java/Kotlin Burp Suite extensions from the-map vulnerability taxonomy documents.

18|5|Updated Feb 10, 2026

Search Tags:#code generation #penetration testing #security automation #vulnerability taxonomy #burp suite #extension generator

Ready to run

npx skills add https://github.com/dmbs335/the-map --skill burp-extension-generator

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: burp-extension-generator
Source: https://github.com/dmbs335/the-map/tree/main/skills/burp-extension-generator
Command: npx skills add https://github.com/dmbs335/the-map --skill burp-extension-generator

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the creation of custom Burp Suite extensions, translating complex vulnerability taxonomies into functional security testing tools.

Core Features & Use Cases

Automated Extension Generation: Creates Java/Kotlin Burp extensions directly from the-map vulnerability taxonomy documents.
Comprehensive Scanner Checks: Generates active and passive scanner checks, including UI components, based on detailed mutation variants.
Use Case: A security researcher needs a Burp extension to detect specific types of HTTP smuggling vulnerabilities. They point this Skill to the relevant taxonomy document, and it generates a fully functional extension with tailored detection logic.

Quick Start

Use the burp-extension-generator skill to create a Burp extension for XSS detection based on the-map.

Frequently Asked Questions about burp-extension-generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a Burp Suite extension from a vulnerability taxonomy document?▼

You can create Burp Suite extensions by providing a vulnerability taxonomy document to the generator. It parses mutation axes and subtypes to produce production-ready Java or Kotlin code, including scanner checks and UI components.

Can I automate creating passive and active scanner checks for custom vulnerabilities?▼

Yes, you can automate creating passive and active scanner checks by feeding detailed mutation variants from your taxonomy into the generator. It builds tailored detection logic and clean architecture for security testing automatically.

Does Burp extension generation support both Java and Kotlin?▼

Burp extension generation supports both Java and Kotlin. It translates complex vulnerability taxonomies into functional security testing tools, generating production-ready code with clean architecture and UI components in either language.

What is the best way to translate HTTP smuggling vulnerability mutations into a Burp extension?▼

The best way to translate HTTP smuggling mutations into a Burp extension is to map your specific mutation variants into a taxonomy document. The generator parses these subtypes to create functional detection logic and scanner checks.

Do I need a specific vulnerability taxonomy format to generate Burp Suite extension code?▼

You need a vulnerability taxonomy document detailing mutation axes and subtypes to generate Burp Suite extension code. The generator parses these specific structural variants to build accurate active and passive scanner checks.

What is included when generating a Burp Suite extension from mutation variants?▼

Generating a Burp Suite extension from mutation variants includes automated code generation, testing strategies, and delivery packaging. It creates scanner checks, UI components, and clean architecture for security researchers.