# Document My Pentest: you hack, the AI writes it up!

DevFeed: [Document My Pentest: you hack, the AI writes it up!](<https://devfeed.tech/articles/document-my-pentest-you-hack-the-ai-writes-it-up-7675.md>)

Original publisher: [Read original article](<https://portswigger.net/research/document-my-pentest>)

Author: Gareth Heyes

Published: 2025-04-23T13:17:24Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Extension](<https://devfeed.tech/topics/extension.md>), [audit trail](<https://devfeed.tech/topics/audit-trail.md>), [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Web](<https://devfeed.tech/topics/web.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Regular expression](<https://devfeed.tech/topics/regular-expression.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [audit-trail](<https://devfeed.tech/tags/audit-trail.md>), [extension](<https://devfeed.tech/tags/extension.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web](<https://devfeed.tech/tags/web.md>), [xss](<https://devfeed.tech/tags/xss.md>)

## AI overview

The article introduces Document My Pentest, an open-source Burp Suite extension that uses Burp AI features to observe web-security testing activity in real time and build a structured audit trail. It describes generating reports with AI and explains prototype lessons, including difficulties analyzing complete requests and responses, successful detection of clear Path Traversal evidence, and a regex-based approach for identifying reflected input. The approach worked for some reflected-data cases but was not suitable for attacks such as Request Smuggling.

## Source excerpt

Tired of repeating yourself? Automate your web security audit trail. In this post I'll introduce a new Burp AI extension that takes the boring bits out of your pen test. Web security testing can be a