Agent skill
Burp Suite Web Application Testing
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/burp-suite-testing-juarezroncalli-ferramentas
Metadata
Additional technical details for this skill
- author
- zebbern
- version
- 4.1.0-fractal
SKILL.md
Burp Suite Web Application Testing
Purpose
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology.
Inputs / Prerequisites
🧠 Knowledge Modules (Fractal Skills)
1. Required Tools
2. Environment Setup
3. Editions Comparison
4. Primary Outputs
5. Phase 1: Intercepting HTTP Traffic
6. Phase 2: Modifying Requests
7. Phase 3: Setting Target Scope
8. Phase 4: Using Burp Repeater
9. Phase 5: Running Automated Scans
10. Phase 6: Intruder Attacks
11. Keyboard Shortcuts
12. Common Testing Payloads
13. Request Modification Tips
14. Operational Boundaries
15. Technical Limitations
16. Best Practices
17. Example 1: Business Logic Testing
18. Example 2: Authentication Bypass
19. Example 3: Information Disclosure
20. Browser Not Connecting Through Proxy
21. HTTPS Interception Failing
22. Slow Performance
23. Requests Not Being Intercepted
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?