Logic Mapper - Burp Suite Extension

Visual Business Logic Flow Mapper for Burp Suite

Logic Mapper is a powerful Burp Suite extension that helps security testers visualize and map complex business logic flows during penetration testing. It allows you to drag-and-drop or right-click requests from Proxy, Repeater, or other Burp tools to create interactive flow diagrams with automatic connections, live side-by-side details panels, and custom notes.

Built with the Montoya API, this extension is designed for performance, stability, and seamless integration with modern Burp Suite versions.

---

🚀 Key Features

🎯 Visual Flow Mapping

• Interactive Canvas: Create diagrams with a responsive drag-and-drop interface.
• Node-Based Visualization: Each HTTP request is represented as a node with its method and path.
• Grid Background: Built-in alignment for clean and organized logic maps.

💻 Real-Time Details Sidebar & Notes

• Split-Screen Panel: Side-by-side layout separating the canvas from request details with a collapsible divider (One-Touch Expandable).
• Native HTTP Editors: View request/response payloads in native syntax-highlighted editor tabs.
• Live Notes Syncing: Type notes directly into the sidebar to sync with request nodes on the fly (marked with a yellow ! notes indicator).
• Context-Aware Deletion: Safely use Delete or Backspace keys to remove nodes from the canvas without interfering with typing inside text editors.

🔗 Smart Connections & Burp Integration

• Auto-Connection: New requests automatically connect to the previous one in sequence.
• Manual Connections: Use Ctrl+Click (or Cmd+Click) to create manual links between any two nodes.
• Bi-Directional Workflow: Send requests back to Burp tools (Right-click node -> Send to Repeater / Send to Intruder).
• Multi-Context Support: Send requests to the mapper from Proxy history, Repeater, or Intercept contexts.

📝 Manual Note Nodes

• Custom Notes: Right-click empty canvas space and choose Add Custom Note Node to create manual logic/business workflow steps (colored teal).
• Mock Editors: Allows you to write mock request/response payloads manually directly inside the sidebar.

🔄 Performance & Portability

• Local Importer: Reconstructs saved maps offline directly from cached responses inside the JSON export—no network replay necessary.
• Thread Safety: Built with thread-safe UI updates and background executors to keep Burp running smoothly.
• Export/Import: Save maps to JSON and reload them later for audits or team collaboration.

---

🛠️ Build and Installation

Prerequisites

• Java 17 or higher
• Burp Suite Professional or Community Edition

Option 1: Build from Source

You can build the logic mapper using Maven:

# Clone the repository
git clone https://github.com/joelindra/logic-mapper.git
cd "Logic Mapper"

# Build the project
mvn clean package

# The compiled JAR will be in:
# target/Logic-Mapper-1.0.0.jar

Option 2: Load in Burp Suite

1. Download or build the Logic-Mapper-1.0.0.jar.
2. Open Burp Suite.
3. Go to Extensions -> Installed -> Add.
4. Select Extension type: Java.
5. Select the file and click Next.
6. The "Logic Mapper" tab will appear in your top bar.

---

📖 Usage Instructions

• Adding HTTP Nodes: Right-click any request in Burp -> Send to Logic Mapper.
• Adding Custom Notes: Right-click empty canvas -> Add Custom Note Node.
• Selecting Nodes: Click a node to view its request, response, and edit notes in the sidebar.
• Connecting Nodes: Ctrl+Click the source node, then click the target node.
• Deleting Connections: Shift+Click a connection line or right-click and select Remove Connection.
• Deleting Nodes: Click the node on the canvas and press Delete / Backspace, or right-click -> Delete Node.
• Sending back to Burp: Right-click any node -> Send to Repeater or Intruder.

---

🤝 Contributing

Contributions, issues, and feature requests are welcome! Feel free to check the issues page or submit a pull request. 🤖 Generated with Claude Code