burpsuite-project-parser

Extract proxy history, site maps, and headers from Burp Suite project files.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill burpsuite-project-parser
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: burpsuite-project-parser
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/burpsuite-project-parser/skills
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill burpsuite-project-parser

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires java, burpsuite_pro.jar, and includes scripts (resource) components.

What problem does it solve?

This Skill enables security analysts and developers to quickly search and extract data from Burp Suite project files (.burp) using the burpsuite-project-file-parser extension, reducing manual inspection time.

Core Features & Use Cases

  • Targeted data extraction: Retrieve audit items, headers, and site maps with safe sub-component filters to avoid large dumps.
  • Structured results: Outputs JSON lines ready for analysis and automation.
  • Use Case: When validating a Burp project for known vulnerabilities, run the tool to pull auditItems and proxyHistory.headers for rapid triage.

Quick Start

Run a basic search on a Burp project: {baseDir}/scripts/burp-search.sh path/to/project.burp auditItems

Frequently Asked Questions about burpsuite-project-parser

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract proxy history from a Burp Suite project file?

You can extract proxy history by running the provided bash script against your .burp project file, targeting the proxyHistory component to retrieve structured JSON lines of request and response headers or bodies for security auditing.

What is the best way to search Burp Suite project files for specific traffic data?

The best way to search Burp Suite project files is using the burpsuite-project-file-parser extension via bash, which applies safe sub-component filters to extract targeted audit items and site maps without generating large unstructured dumps.

Do I need Java to parse Burp Suite project files from the CLI?

Yes, you need Java installed because the parser relies on the burpsuite_pro.jar file from Burp Suite Pro, which is invoked through the provided bash script to extract and search project data.

Can I extract site maps from a Burp project without opening the Burp Suite GUI?

Yes, you can extract site maps directly from the CLI by running the bash search script on your project file, outputting structured JSON lines that are ready for automated traffic analysis and triage.

How does targeted data extraction from Burp project files work for security audits?

Targeted extraction works by invoking the Java-based parser through a bash script to query specific sub-components like auditItems and headers, returning filtered JSON lines to reduce manual inspection time during security audits.

What are the limitations of using bash scripts to parse Burp Suite project files?

The primary limitation is the strict dependency on both Java and the burpsuite_pro.jar file from Burp Suite Pro, meaning this parsing approach cannot function in environments lacking these specific prerequisites.