Professional

Logic Mapper

Logic Mapper is a Burp Suite extension that helps security testers visualize and document complex business logic flows during penetration testing. HTTP requests are represented as nodes on an interactive canvas, allowing testers to map request sequences, annotate steps, and trace multi-stage workflows through a graphical interface.

Features

  • Node-based canvas where each HTTP request is displayed with its method and path, arranged on a grid background for alignment.
  • Automatic connections link new request nodes to the previous one in sequence; manual connections between any two nodes can be created using Ctrl+Click (or Cmd+Click).
  • Split-screen sidebar displays native syntax-highlighted request and response editor tabs alongside live-synced notes for each selected node, indicated by a yellow ! marker.
  • Custom note nodes can be added to the canvas by right-clicking empty space and selecting Add Custom Note Node, supporting manual documentation of workflow steps with mock request/response payloads.
  • Right-clicking any node allows requests to be sent back to Repeater or Intruder, and requests can be sent to the mapper from Proxy history, Repeater, or Intercept contexts.
  • Maps can be exported to JSON and re-imported later, reconstructing the full diagram from cached response data without replaying network requests.
  • Connections can be removed by Shift+Click on a connection line or via right-click menu; nodes can be deleted using Delete or Backspace without interfering with text input in the sidebar.

Usage

  1. Right-click any request in Proxy history, Repeater, or Intercept and select Send to Logic Mapper to add it as a node on the canvas.
  2. Click any node on the canvas to view its request and response details in the sidebar panel on the right.
  3. Type directly into the notes area in the sidebar to attach annotations to the selected node; the node will display a yellow ! indicator when notes are present.
  4. To manually connect two nodes, Ctrl+Click the source node, then click the target node to draw a connection line.
  5. To remove a connection, Shift+Click the connection line, or right-click it and select Remove Connection.
  6. Right-click empty canvas space and select Add Custom Note Node to insert a teal-colored annotation node for documenting manual workflow steps.
  7. Right-click any node and select Send to Repeater or Send to Intruder to route the request back for further testing.
  8. To save the current map, use the export option to write the diagram to a JSON file; use the import option to reload a previously saved map from that file.

Author

Author

Joel Indra

Version

Version

1.0.0

Rating

Rating

Popularity

Popularity

Last updated

Last updated

30 July 2026

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.