Repository files navigation

Burparser is a powerful Burp Suite extension designed to extract and analyze directory structures, sensitive paths, and potential API endpoints from web application responses. The tool automates wordlist generation for fuzzing, aids in identifying access control issues, and provides a comprehensive overview of discovered endpoints.

• Passive Directory Discovery: Extracts and categorizes valid, forbidden, and redirected directories.
• Wordlist Generation: Builds a customized wordlist from observed paths, filenames, and parameters.
• Enhanced Error Detection: Identifies and classifies error pages to improve security testing.
• Scope Filtering: Option to process only in-scope URLs within Burp Suite.
• Security Headers Extraction: Analyzes headers for security misconfigurations.
• Export Capabilities: Supports exporting results and wordlists in JSON or text format.
• Burp Suite Integration: Provides an interactive UI within Burp Suite for easy navigation and analysis.

1. OpenBurp Suite.
2. Download the extension from the repository and then install it manually by navigating toExtender >Extensions >Add, selecting the downloaded file, and ensuring Jython is properly configured inExtender >Options >Python Environment.
3. ClickInstall or manually add the Jython script inExtender >Extensions >Add.
4. EnsureJython is configured inExtender >Options >Python Environment.

• The extension passively processes HTTP responses and extracts directory paths, API endpoints, and sensitive URLs.
• Valid directories (200), Forbidden paths (403), Redirected URLs, and Error pages are categorized.

• Extracted paths are compiled into a dynamic wordlist for use in fuzzing tools (e.g.,ffuf,dirsearch).
• ClickExport Wordlist to save a custom wordlist.

• Right-click in theTarget >Site Map and selectExtract Paths for Burparser.
• Extract paths from selected nodes or entire subdirectories.

• Use theFilter field to search specific domains or paths.
• ClickExport Results to save findings in JSON format.
• Export filtered wordlists with custom length and regex options.

• Burp Suite (Community or Professional Edition)
• Jython (Python 2.7 compatibility layer for Java)

Contributions are welcome! Submit a pull request or report issues via theGitHub Issues page.

MIT License - Feel free to use, modify, and distribute.

For support or feature requests, open an issue on theGitHub repository.