Site Map Extractor
Summary: PortSwigger lists a Burp Suite extension called Site Map Extractor, authored by Susan Wright at version 1.2 and last updated 29 January 2020, that pulls three kinds of data from a scan's site map: anchor links, requests by response code range (1xx through 5xx), and a full export of requests and responses to a .txt file. It can run against the full site map or in-scope items only, optionally saves link and response-code logs to .csv, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.
What you should know: The extension exports complete request and response content to a plain .txt file, so a tester's site map - including whatever credentials, tokens, or internal URLs it captured - can leave the tool as an unmanaged file on disk.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026