🔌 Burp Suite Integration

Neuro Pentest × Burp Suite — complete workflow with CVE intelligence, scan history, diff & JIRA

📤 Export CVEs to Burp XML

Download vulnerabilities as Burp Suite XML. Filter by product keyword or minimum CVSS score.

💉 Export Payloads to JSON

Download Burp Intruder payload sets. Select categories and optional encoding.

🎯 Intruder Payload Generator

Generate a full Burp Intruder config — pick categories, target URL, and parameter name.

📥 Import Burp Scan Results

Upload a Burp scan XML or JSON — saved to scan history for future reference.

No file selected

🔗 JIRA Ticket Export

Push vulnerability findings as JIRA tickets. Configure your JIRA instance below.

JIRA Cloud with API token required. Create a token at id.atlassian.com/manage-profile/security/api-tokens

📚 API Endpoints

REST API for CI/CD and extension integration.

GET /api/burp/cves — list/filter CVEs GET /api/burp/cve/:id — NVD lookup + EPSS GET /api/burp/epss/:id — EPSS score only GET /api/burp/export/cve/xml — Burp XML export GET /api/burp/export/payloads/json GET /api/burp/intruder/generate GET /api/burp/payload-sets GET /api/burp/payloads/:cat GET /api/burp/scans — scan history GET /api/burp/scans/:id — scan detail GET /api/burp/scans/:id/export — re-export GET /api/burp/scans/diff?id1=&id2= POST /api/burp/export/jira POST /api/burp/import/scan DELETE /api/burp/scans/:id

🔧 Burp Extension

Neuro Pentest extension for Burp Suite Pro — download and install in Extender.

1. Burp → Extender → Extensions 2. Add → Select neuro-pentest-ext.py 3. Requires Jython configured 4. Tab "Neuro Pentest" appears

📁 Scan History

🔍 NVD CVE Lookup + EPSS Score

Look up real CVE data from the National Vulnerability Database (NVD). EPSS = probability of exploitation in the next 30 days (higher = more likely to be exploited).

📊 Scan Diff — Compare Two Imports

Select two scans to see what changed between them: new issues, removed issues, and severity changes.

vs

📖 Instructions / Инструкция

🇬🇧 English

  1. Export CVEs — Product filter + min CVSS → Download XML → Import into Burp Suite
  2. Intruder Payloads — Pick categories → Choose encoding → Download JSON → Load in Burp Intruder
  3. Intruder Config — Categories + target URL + parameter → Generate config file
  4. Import Scans — Upload Burp XML/JSON → saved to history → view/export/delete
  5. Compare Scans — Select two scans → new/resolved/changed issues → PDF report
  6. CVE Lookup — Enter CVE ID → NVD data, CVSS score, EPSS probability
  7. JIRA Export — Configure domain/email/token → pick scan → create tickets
  8. Burp Extension — Download extension → Install in Extender → Neuro Pentest tab

🇷🇺 Русский

  1. Экспорт CVE — Фильтр продукта + мин. CVSS → Скачать XML → Импорт в Burp
  2. Payloads Intruder — Категории → Кодировка → Скачать JSON → Загрузить в Intruder
  3. Конфиг Intruder — Категории + URL цели + параметр → Генерация конфига
  4. Импорт сканов — Загрузить XML/JSON от Burp → история → просмотр/экспорт
  5. Сравнение сканов — Выбрать 2 скана → новые/исправленные/изменённые → PDF
  6. Поиск CVE — ID уязвимости → данные NVD, CVSS, EPSS
  7. Экспорт в JIRA — Домен/email/токен → выбор скана → тикеты
  8. Расш. Burp — Скачать расширение → Установить в Extender → Вкладка NP

🧠 AI Vulnerability Analysis

Analyze any finding with local AI (Ollama llama3.2:3b) for prioritization, business impact, and remediation steps. No API key needed.

🕵️ JS Source Inspector

Paste JavaScript source code to extract API endpoints, secrets, internal hostnames, and IDOR patterns.