Is this compatible with macOS and Windows?

Yes, the skill is designed to work on both platforms provided the BURP_JAVA and BURP_JAR environment variables are correctly configured.

How does it handle large .burp files?

It implements mandatory safety checks, including a 50KB total output limit and 1000-character truncation for response bodies to ensure Claude's context window isn't overwhelmed.

Can I view full response bodies through this skill?

No. To maintain performance, all bodies are truncated. If you need to view the full, unedited content, it is recommended to open the project in the Burp Suite UI.

Which data components can I filter?

You can specifically target request/response headers and bodies for both the Proxy History and the Site Map, as well as extracting all Audit Items.

Burp Suite Project Parser

Name: Burp Suite Project Parser
Author: sudohakan

bysudohakan

•

セキュリティとテスト

Enables CLI-based searching and data extraction from Burp Suite Professional project files for security analysis.

This skill provides a specialized interface for Claude to interact with .burp files directly from the command line, delegating the heavy lifting to Burp Suite Professional and the burpsuite-project-file-parser extension. It allows for advanced regex searching of response headers and bodies, extraction of security audit findings, and analysis of HTTP traffic without leaving the terminal. Designed for security professionals, it enforces strict data truncation and pre-retrieval size checks to prevent context overflow while maintaining deep visibility into captured web traffic and vulnerabilities.

主な機能

01Extraction of security audit items with severity and confidence filtering

02Regex-based searching across response headers and bodies

03Granular sub-component filters for proxy history and site map data

04Cross-platform support for macOS and Windows environments

05Automated output truncation to prevent LLM context window overflow

062 GitHub stars

ユースケース

01Identifying specific server signatures or headers across an entire application history

02Extracting and triaging high-severity findings from existing Burp Suite projects

03Auditing large-scale HTTP traffic logs for specific security vulnerabilities or patterns

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles trailofbits-security

For use in Claude.ai and ChatGPT

主な機能

01Extraction of security audit items with severity and confidence filtering

02Regex-based searching across response headers and bodies

03Granular sub-component filters for proxy history and site map data

04Cross-platform support for macOS and Windows environments

05Automated output truncation to prevent LLM context window overflow

062 GitHub stars

ユースケース

01Identifying specific server signatures or headers across an entire application history

02Extracting and triaging high-severity findings from existing Burp Suite projects

03Auditing large-scale HTTP traffic logs for specific security vulnerabilities or patterns

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sudohakan/claude-code-dotfiles trailofbits-security

For use in Claude.ai and ChatGPT