Vulnsy
Back to Free Tools

Burp to OpenAPI Converter

Turn a Burp Suite XML export into an OpenAPI 3.0 spec ready to import into Postman, Insomnia, or Swagger UI. Runs entirely in your browser — your captured traffic never leaves the device.

How to Use

In Burp > right-click the URL in the Target tab > Save selected items (ensure Base64-encode is ticked).

Drop a Burp XML export here, or click to browse
Burp Suite → Target → right-click host → Save selected items (with Base64-encode ticked)

Any path containing one of these as a full segment will be skipped (case-insensitive). Useful for stripping bot-management, analytics, or vendor paths.

Features

100% Client-Side

The XML is parsed and converted in your browser. No upload, no server, no logging.

Smart Templating

Auto-detects path parameters (UUIDs, numeric IDs, opaque tokens) and groups sibling paths into a single templated route.

Auth & Body Aware

Detects Bearer / Basic / API key auth, infers request-body schemas from JSON and form-urlencoded payloads, and surfaces query parameters.

Noise Filtering

Skips static assets (JS, CSS, fonts, images, fonts) and Cloudflare infrastructure paths by default. Toggle off if you need them.

OpenAPI 3.0 Output

Drop the resulting JSON straight into editor.swagger.io, Postman, Insomnia, or any OpenAPI-aware tool.

Open Source

Based on the Burp2API Python tool by MrTurvey. This is a faithful TypeScript port that produces the same output, in your browser.