burpsuite-project-parser
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
npx skills add trailofbits/skills --skill burpsuite-project-parser --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Burp Project Parser Search and extract data from Burp Suite project files using the burpsuite-project-file-parser extension. ## When to Use - Searching response headers or bodies with regex patterns - Extracting security audit findings from Burp projects - Dumping proxy history or site map data - Analyzing HTTP traffic captured in a Burp project file ## Prerequisites This skill **delegates parsing to Burp Suite Professional** - it does not parse .burp files directly. **Required:** 1. **Burp Suite Professional** - Must be installed ([portswigger.net](https://portswigger.net/burp/pro)) 2. **burpsuite-project-file-parser extension** - Provides CLI functionality **Install the extension:** 1. Download from [github.com/BuffaloWill/burpsuite-project-file-parser](https://github.com/BuffaloWill/burpsuite-project-file-parser) 2. In Burp Suite: Extender → Extensions → Add 3. Select the downloaded JAR file ## Quick Reference Use the wrapper script: ```bash {baseDir}/scripts/burp-search.sh /path/to/project.burp [FLAGS] ``` The script uses environment variables for platform compatibility: - `BURP_JAVA`: Path to Java executable - `BURP_JAR`: Path to burpsuite_pro.jar See [Platform Configuration
- When to Use
- Prerequisites
- Quick Reference
- Sub-Component Filters (USE THESE)
- Available Filters
- Default Approach
- Regex Search Operations
- Search Response Headers
- Search Response Bodies
- Other Operations
- Extract Audit Items
- Dump Proxy History (AVOID)
- Dump Site Map (AVOID)
- Output Limits (REQUIRED)
GOOD - headers only, safe to retrieve
BAD - full records include bodies, can be gigabytes
jq -r 'select(.headers | test("text/html")) | .url' | head -n 20
head -n 10 | jq -c '.body = (.body[:1000] + "...[TRUNCATED]")'
REQUIRED format - always truncate .body field
auditItems
proxyHistory
siteMap
Check record count AND total bytes - never skip this step
jq -c 'select(.url | test("/api/"))' | head -n 50What does the burpsuite-project-parser skill do?
Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.
How do I install it?
Run `npx skills add trailofbits/skills --skill burpsuite-project-parser --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.