Agent skill · security · aradotso
deepseek-pentest-ai-burp-extension
AI-powered Burp Suite extension for automated payload generation and vulnerability testing using DeepSeek API
Why this skill is useful
Adds executable scripts for automated vulnerability testing and payload generation that are not available in standard tools.
What it needs
Requires burp-suite, jython installed locally. Requires deepseek account access. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
DeepSeek Pentest AI Burp Extension Skill by ara.so — Security Skills collection. DeepSeek Pentest AI is a Burp Suite extension that combines generative AI with intelligent fuzzing to automate payload generation and vulnerability testing. It uses the DeepSeek API to generate context-aware attack payloads for SQL injection, XSS, command injection, path traversal, SSRF, RCE, SSTI, XXE, and more. What It Does AI-Powered Payload Generation: Creates advanced attack payloads using DeepSeek's language model Automatic Parameter Detection: Identifies parameters in GET, POST, JSON, XML, multipart, and custom headers Smart Fuzzing: Injects payloads, compares against baselines, scores severity and confidence Real-Time Metrics: Visualizes vulnerability types with integrated charts Privacy-First: Redacts hostnames and sanitizes sensitive data before sending to AI Export Results: CSV export with full request/response history and evidence Burp Integration: Send findings directly to Repeater and Intruder Installation Prerequisites Burp Suite Pro or Community Edition Jython standalone JAR (for Python extensions) DeepSeek API key from https://platform.deepseek.com/ Setup Steps 1. Clone the repository: 2. Configure Jython in Burp Suite: Go to Extender → Options Under Python Environment, set the location of jython-standalone.jar 3. Load the extension: Go to Extender → Extensions → Add Extension type: Python Extension file: Select the .py file from the cloned repository Check the Output tab for "Plugin initialized" message 4. Configure API Key: Navigate to the DeepSeek Pentest AI tab in Burp Enter your DeepSeek API key (store in environment variable for security) Core Workflow 1. Capture a Request Intercept a request in Burp Proxy or send one from Repeater to the extension. 2. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/deepseek-pentest-ai-burp-extension