Skip to content

Metsuke - A Burp Suite extension for private security assessments. Logs web application flows, tracks screen transitions, and exports structured request/response data. Free to use and modify.

License

Notifications You must be signed in to change notification settings

akuma-log/Metsuke

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

35 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Metsuke - Burp Suite Extension

A Burp Suite extension to log and analyze web application flows, including screen transitions, parameters, and request/response details.

Gemini_Generated_Image_rir305rir305rir3

Features

  • Logs requests/responses with metadata (URL, method, params, status codes)
  • Customizable scope and filtering
  • Export data to clipboard (tab-delimited for Excel)
  • Highlight important requests
  • Screen/button tracking for web flows

Requirements

  • Burp Suite Professional/Community (v2022.9+)
  • Jython 2.7 Standalone JAR

Installation

Step 1: Install Jython

  1. Download Jython 2.7 Standalone JAR from:
    https://www.jython.org/download
  2. In Burp Suite, go to:
    ExtensionsExtensions SettingsPython Environment
    → Set path to the downloaded Jython JAR file

Step 2: Load the Extension

  1. Download metsuke.py from this repository
  2. In Burp Suite:
    ExtensionsAdd
    → Select Python as type → Choose the downloaded .py file

Usage

  1. After loading, a new tab "Metsuke" will appear
  2. Browse your target application while Burp proxies traffic
  3. Use the interface to:
    • Filter requests by scope/extensions
    • Highlight important entries
    • Copy selected data to clipboard
    • Organize screens/flows

Customization

  • Manage Scope: Control which URLs are logged
  • Filter Extensions: Include/exclude file types (.js, .php, etc.)
  • Column Selection: Right-click → Copy specific columns

Troubleshooting

  • Extension not loading?

    • Verify Jython is properly configured in Burp
    • Check Burp's ExtensionsErrors tab for debug info
  • Missing requests?

    • Adjust scope rules via Manage Scope button
    • Disable filters if needed

Disable Browser Cache for better performance

  • you can disable the cache in Firefox by going to about:config and setting network.http.use-cache to false, but this can negatively impact performance. A better alternative for most users is to use a keyboard shortcut to bypass the cache when needed, such as Shift + Click the Reload button or Ctrl+F5, which forces a fresh download for that specific page without permanently disabling caching. For permanent disabling, you can set network.http.use-cache to false in about:config, or clear the cache automatically when you close Firefox in the settings.

Design

image

About

Metsuke - A Burp Suite extension for private security assessments. Logs web application flows, tracks screen transitions, and exports structured request/response data. Free to use and modify.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages