Proxy Enriched Sequence Diagrams Exporter
Summary: PESD Exporter is a Burp Suite extension, authored by Francesco Lacerenza and at version 2.0, that converts proxy traffic into interactive sequence diagrams called Proxy Enriched Sequence Diagrams, carrying HTTP details as explorable metadata. It supports standard OAuth2/OpenID/SAML matching, adds a frame and custom flags around those flows, and defaults to Auto-Export, which exports items sent to its tab and then cleans them from the extension.
What's compelling: Complex authentication flows like OAuth2, OpenID and SAML are where access decisions get made, and this tool exists to make that traffic visible as a diagram rather than a flat request log. PortSwigger notes the extension is written by a third party and carries no warranty, so a security leader should weigh that against the low estimated system impact before adding it to a testing workflow.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026