SShortSingh.
Back to feed

BurpSqueezer compresses Burp Suite traffic dumps for LLM-ready AI analysis

0
·1 views

A developer has released BurpSqueezer, an open-source tool that compresses large Burp Suite HTTP traffic captures into compact Markdown reports optimized for AI processing. The tool reduced a 26.7 MB traffic dump to just 35 KB — a 745-fold compression — making it feasible to feed real penetration testing data into large language models that enforce file size limits. BurpSqueezer filters out irrelevant traffic such as CDN requests and maps relationships between API endpoints to preserve meaningful structure. The tool is designed for large, complex HTTP datasets and does not perform any active testing or send requests itself — it only processes already-captured, authorized traffic. The project is available on GitHub and its creator is seeking feedback from web security and API penetration testers.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer builds Polish-keyword programming language, gains deep Ruby insights

A Ruby developer spent 18 months building AlexScript, a fully featured interpreted scripting language whose keywords are written in Polish, his first language. The project grew from a weekend experiment into a language with a standard library, async/await support, a debugger, and a self-hosted web framework. Building the interpreter revealed several Ruby performance nuances, including that Ruby's throw/catch is far more efficient than raise/rescue for non-local exits like function returns. The developer also discovered that scanning UTF-8 strings character by character causes accidentally quadratic performance, fixable by using getbyte and byteslice for O(1) byte access. A unified method dispatch table — rather than separate registries for native and user-defined methods — further simplified the interpreter's architecture and improved lookup efficiency.

0
ProgrammingDEV Community ·

Go developer builds linter to enforce file-level visibility in flat packages

A Go developer has released declscope, an open-source linter designed to enforce file-scoped access boundaries within Go's flat package structure. Go conventionally offers only two visibility levels — exported and unexported — with no native file-scope option, meaning any unexported symbol is accessible across all files in a package. The tool addresses a growing concern that AI coding agents, finding unexported helpers in scope, call or modify them freely since such cross-file conventions exist only as informal comments rather than compiler-enforced rules. The developer noted that even explicit instructions in AI configuration files failed to reliably prevent boundary violations, prompting a machine-checkable solution. declscope can be installed via standard Go tooling and flags violations when declarations are used outside their intended file scope, providing agents and reviewers with clear repair guidance.

0
ProgrammingDEV Community ·

AI Agents Can Use Far More Energy Than Single Prompts, Researcher Finds

Climate scientist Zeke Hausfather analyzed the energy consumption of AI agentic workflows, finding they can use significantly more electricity than standard one-off chatbot prompts. Unlike a simple question-and-answer exchange, AI agents repeatedly re-process their entire accumulated context with each step — such as running commands, reading files, or calling tools — driving up computational costs. Hausfather estimated his own daily AI agent usage consumed between 1.2 and 5.9 kWh, with visible output accounting for just 0.4 percent of total tokens processed. The concern is not one user's consumption in isolation, but the aggregate energy demand when many users run agentic workflows simultaneously. While an exact global climate impact remains uncertain, the directional finding is clear: agentic AI systems can carry a substantially larger energy footprint than most users assume.

0
ProgrammingDEV Community ·

ECC Agent Harness Runs in Cursor Without Context Bloat Using Modular Setup

Developer affaan-m released ECC v2.0, an agent harness that standardizes AI coding rules, skills, and MCP configurations across tools like Cursor, Claude Code, and Codex. A key challenge when using ECC inside Cursor is context bloat, where loading all instinct files and tool schemas at once rapidly consumes tokens and slows multi-turn sessions. The recommended fix is modular rule scoping — symlinking only language-specific rules relevant to the active workspace rather than loading the full ECC repository into the root prompt. MCP servers are added selectively via a project-level config file to further limit unnecessary context. Testing showed that routing Cursor through a prompt-caching gateway endpoint reduced multi-turn context costs by roughly 80–90% while preserving reasoning quality and chat history.