Performs comprehensive web application security audits by intercepting HTTP traffic, modifying requests, and identifying vulnerabilities using Burp Suite.
This skill provides a structured methodology for conducting professional web application security assessments using Burp Suite's integrated toolset. It guides users through the entire testing lifecycle, from initial proxy configuration and traffic interception to advanced manual testing with Repeater, automated vulnerability scanning, and custom Intruder-based attacks. By providing domain-specific patterns for discovering flaws like SQL injection and broken access controls, this skill enables both developers and security researchers to perform systematic, proxy-based testing while maintaining strict operational boundaries and scopes.
主な機能
01HTTP Traffic Interception and Live Modification
02Automated Fuzzing and Brute-force via Intruder
030 GitHub stars
04Manual Request Replay and Analysis with Repeater
05Target Scope Definition and Site Mapping
06Automated Vulnerability Scanning and Reporting
ユースケース
01Testing business logic flaws through request parameter manipulation
02Identifying OWASP Top 10 vulnerabilities in web applications
03Automating credential testing and API fuzzing workflows