DeepSeek Pentest AI Burp Extension

Skill by ara.so — Security Skills collection.

DeepSeek Pentest AI is a Burp Suite extension that combines generative AI with intelligent fuzzing to automate payload generation and vulnerability testing. It uses the DeepSeek API to generate context-aware attack payloads for SQL injection, XSS, command injection, path traversal, SSRF, RCE, SSTI, XXE, and more.

What It Does

• AI-Powered Payload Generation: Creates advanced attack payloads using DeepSeek's language model
• Automatic Parameter Detection: Identifies parameters in GET, POST, JSON, XML, multipart, and custom headers
• Smart Fuzzing: Injects payloads, compares against baselines, scores severity and confidence
• Real-Time Metrics: Visualizes vulnerability types with integrated charts
• Privacy-First: Redacts hostnames and sanitizes sensitive data before sending to AI
• Export Results: CSV export with full request/response history and evidence
• Burp Integration: Send findings directly to Repeater and Intruder

Installation

Prerequisites