burpsuite-project-parser

Extracts security audit findings and searches headers/bodies in .burp files.

6.5k|561|Updated Jan 14, 2026

Search Tags:#regex #site-map #security-analysis #burp-suite #project-files #burp #proxy-history

Ready to run

npx skills add https://github.com/trailofbits/skills --skill burpsuite-project-parser-trailofbits

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: burpsuite-project-parser
Source: https://github.com/trailofbits/skills/tree/main/plugins/burpsuite-project-parser/skills
Command: npx skills add https://github.com/trailofbits/skills --skill burpsuite-project-parser-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Searches and explores Burp Suite project files (.burp) from the command line.

Core Features & Use Cases

Searches response headers or bodies with regex patterns
Extracts security audit findings
Dumps proxy history or site map data
Analyzes HTTP traffic captured in a Burp project

Quick Start

Run the burpsuite-project-search tool against a .burp project to extract findings and traffic details.

Frequently Asked Questions about burpsuite-project-parser

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I search Burp Suite project files from the command line?▼

You can search Burp Suite project files (.burp) from the command line using a CLI wrapper script that applies regex patterns to response headers and bodies to extract targeted security data.

Can I extract proxy history and site map data from a .burp file?▼

Yes, you can extract proxy history and site map data from a .burp file by running the CLI search tool to dump HTTP traffic details and analyze captured requests and responses.

Do I need Burp Suite Professional to parse .burp project files?▼

Yes, parsing .burp project files requires Burp Suite Professional and the burpsuite-project-file-parser extension to execute CLI queries and extract audit items.

What is the best way to extract security audit findings from Burp projects?▼

The best way to extract security audit findings from Burp projects is using a CLI parser that directly queries .burp files to accelerate security auditing and isolate findings.

How do I run regex searches on HTTP response bodies captured in Burp Suite?▼

You can run regex searches on HTTP response bodies captured in Burp Suite by executing the CLI search script against your .burp project files to match patterns in headers and bodies.

Are there limitations when analyzing Burp project files offline?▼

A limitation of analyzing Burp project files offline is that you must have the .burp project file locally and the required Burp Suite Professional environment installed to run the parser.