A Burp Suite extension to log and analyze web application flows, including screen transitions, parameters, and request/response details.
- Logs requests/responses with metadata (URL, method, params, status codes)
- Customizable scope and filtering
- Export data to clipboard (tab-delimited for Excel)
- Highlight important requests
- Screen/button tracking for web flows
- Burp Suite Professional/Community (v2022.9+)
- Jython 2.7 Standalone JAR
- Download Jython 2.7 Standalone JAR from:
https://www.jython.org/download - In Burp Suite, go to:
Extensions→Extensions Settings→Python Environment
→ Set path to the downloaded Jython JAR file
- Download
metsuke.pyfrom this repository - In Burp Suite:
Extensions→Add
→ SelectPythonas type → Choose the downloaded.pyfile
- After loading, a new tab "Metsuke" will appear
- Browse your target application while Burp proxies traffic
- Use the interface to:
- Filter requests by scope/extensions
- Highlight important entries
- Copy selected data to clipboard
- Organize screens/flows
- Manage Scope: Control which URLs are logged
- Filter Extensions: Include/exclude file types (
.js,.php, etc.) - Column Selection: Right-click → Copy specific columns
-
Extension not loading?
- Verify Jython is properly configured in Burp
- Check Burp's
Extensions→Errorstab for debug info
-
Missing requests?
- Adjust scope rules via
Manage Scopebutton - Disable filters if needed
- Adjust scope rules via
- you can disable the cache in Firefox by going to
about:configand settingnetwork.http.use-cacheto false, but this can negatively impact performance. A better alternative for most users is to use a keyboard shortcut to bypass the cache when needed, such asShift + Clickthe Reload button orCtrl+F5, which forces a fresh download for that specific page without permanently disabling caching. For permanent disabling, you can setnetwork.http.use-cacheto false inabout:config, or clear the cache automatically when you close Firefox in the settings.