actionperformed=self wordlist_menu)return menu_list the code in this listing should be pretty familiar by now we start by importing the required modules helper tagstripper class will allow us to strip the html tags out of the http responses we process later on its handle_data function stores the page text in member variable we also define handle_comment because we want the words stored in developer comments to be added to our password list as well under the covershandle_comment just calls handle_data (in case we want to change how we process page text down the roadthe strip function feeds html code to the base classhtmlparserand returns the resulting page text which will come in handy later the rest is almost exactly the same as the start of the bhp_bing py script we just finished once againthe goal is to create context menu item in the burp ui the only thing new here is that we store our wordlist in setwhich ensures that we don' introduce duplicate words as we go we initialize the set with everyone' favorite password"passwordjust to make sure it ends up in our final list now let' add the logic to take the selected http traffic from burp and turn it into base wordlist def wordlist_menu(self,event)grab the details of what the user clicked http_traffic self context getselectedmessages(for traffic in http_traffichttp_service traffic gethttpservice(host http_service gethost(self hosts add(hosthttp_response traffic getresponse(if http_responseself get_words(http_responseself display_wordlist(return def get_words(selfhttp_response)headersbody http_response tostring(split('\ \ \ \ ' skip non-text responses if headers lower(find("content-typetext"=- return tag_stripper tagstripper(page_text tag_stripper strip(bodywords re findall("[ -za- ]\ { ,}"page_textfor word in wordsfilter out long strings if len(word< self wordlist add(word lower()return our first order of business is to define the wordlist_menu functionwhich is our menu-click handler it saves the name of the responding host for laterand then retrieves the http response and feeds it to our get_words function from thereget_words splits out the header from the message body