Extract PHP routes and generate Burp request templates.
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-route-mapper
Please help me install this Agent Skill. Skill: php-route-mapper Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-route-mapper Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-route-mapper
This Skill automates the tedious process of identifying all routes within a PHP project, understanding their parameter structures, and generating ready-to-use Burp request templates for security testing.
Use the php-route-mapper skill to extract routes and generate Burp templates for the current PHP project.
High-intent search queries and answers about installing and using this skill.
To extract PHP routes and generate Burp Suite request templates, you can use a route mapping tool that analyzes your PHP project structure, identifies endpoints across frameworks like Laravel or Symfony, and outputs structured data including methods, paths, and parameters for direct use in penetration testing.
Mapping endpoints in a PHP project without a standard framework requires fallback routing detection mechanisms. These mechanisms analyze custom routing logic within the codebase to identify accessible paths, controllers, and parameter shapes, ensuring comprehensive route discovery even for un-frameworked applications.
Yes, identifying parameter sources such as GET, POST, or JSON is possible during PHP route extraction. The analysis maps each endpoint to its specific parameter structures, detailing the HTTP method, path, controller, action, and the expected parameter sources for accurate security testing inputs.
Yes, this route extraction approach supports common PHP frameworks like Laravel, ThinkPHP, and Symfony. It detects framework-specific routing configurations to accurately identify endpoints and their parameter shapes, while also providing fallback mechanisms for custom routing logic.
Automating the reconnaissance phase for a PHP application security audit involves extracting all routes and parameter structures from the codebase. This generates a comprehensive map of accessible endpoints and ready-to-use Burp request templates, significantly speeding up initial vulnerability discovery.
dnsnamdangGenerate API documentation from PHP code in ERP TPE projects.
gerald-icaAutomate web application security testing with Burp Suite.
macaughDetects injection, memory safety and authorization flaws in multiple languages.
gongzeqCrawls authorized web targets to generate deduplicated candidate URLs for vulnerability scanning.
